Google dishes out homemade SLSA, a recipe to thwart software supply-chain attacks

SLSA – short for Supply chain Levels for Software Artifacts – aspires to provide security guidance and programmatic assurance to help defend the software build and deployment process.