Skip to content

Comments

New build track filenames and editorial changes#1556

Open
mcevoy-building7 wants to merge 6 commits intoslsa-framework:mainfrom
mcevoy-building7:new-build-track
Open

New build track filenames and editorial changes#1556
mcevoy-building7 wants to merge 6 commits intoslsa-framework:mainfrom
mcevoy-building7:new-build-track

Conversation

@mcevoy-building7
Copy link

The new content of the SLSA Specification needed to be recombined to include additional content categories that had clearly defined heads that facilitated navigation and provided consistency for both users and contributors.

Some of the Build Track has been redistributed, terminology rearranged, headings clarified to reduce misunderstandings, new transitions and introductions added to existing content to enhance the flow of information.

A SLSA Track Specification Template has been created and submitted as Issue #1554 and this can assist contributors to add new content in the right places.

Notes on new Build Track filenames:

To create consistency filenames across all tracks, I have changed some of the filenames so they match the general pattern of all track processes:

PROCESSES COMMON TO ALL TRACKS

  • Basics - introduction to track, track-specific terminology, and brief listing of the levels
  • Requirements - explains the detailed security requirements to achieve each level
  • Provenance - covers the distribution and verification of provenance metadata in the form of SLSA attestations
  • Verification - recommendations for how to verify artifacts and their SLSA provenance by human inspection
  • Assessment - describes the parts of the underlying platform that consumers should access with relevant questions

NEW FILENAMES
The new filenames are listed below, with the old in parentheses:

build-track-basics.md (same)
build-track-requirements.md (build-requirements.md)
build-track-provenance.md (distributing-provenance.md)
build-track-verification.md (verifying-artifacts.md)
build-env-track-assessment.md (assessing-build-platforms.md)

The old branch was build-track and the new is new-build-track.

All subsequent tracks will follow the same filename conventions, which will make it easier for contributors to know what file and track they are working on.

@netlify
Copy link

netlify bot commented Jan 26, 2026

Deploy Preview for slsa ready!

Name Link
🔨 Latest commit 5a8a56e
🔍 Latest deploy log https://app.netlify.com/projects/slsa/deploys/6977341dfcbfb300083fffbe
😎 Deploy Preview https://deploy-preview-1556--slsa.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🆕 New

Development

Successfully merging this pull request may close these issues.

1 participant