SLSA v1.2

SLSA (Supply-chain Levels for Software Artifacts) is the OpenSSF framework for describing how trustworthy a software artifact’s supply chain is, organized into tracks and levels. We use v1.2 of the specification as the shared vocabulary for our supply chain requirements: each project states the SLSA level it meets, and new projects are expected to reach at least Build Level 2 from the start.