Maintained with ☕️ by
IcePanel logo

Cloud Build support for Supply-chain Levels for Software Artifacts (SLSA) version 1.0 compliant provenance is now generally available to help you safeguard your automated build pipelines

Share

Services

## Feature Cloud Build support for [Supply-chain Levels for Software Artifacts (SLSA) version 1.0](https://slsa.dev/spec/v1.0/) compliant provenance is now [generally available](https://cloud.google.com/products/#product-launch-stages) to help you safeguard your automated build pipelines. Build provenance is verifiable metadata that you can use to audit builds. Cloud Build can generate provenance aligned with the SLSA v1.0 spec when you use the option `requestedVerifyOption` with triggered builds. Learn how to use [build provenance in Cloud Build](https://cloud.google.com/build/docs/securing-builds/generate-validate-build-provenance).