Verified65% confidenceFactExact time
The SLSA (Supply-chain Levels for Software Artifacts) framework, led by Google, divides software supply chain security capabilities into four levels.
3
Sources
65%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
hackernewshackernews7/9/2026
Related Claims
UnverifiedThe SLSA framework was proposed by Google in 2021 and has since been transferred to OpenSSF for governance, dividing software supply chain security capabilities into four levels (L1 to L4).84% similarUnverifiedSLSA 框架和 Sigstore 项目旨在为软件制品提供端到端的来源证明和签名验证，谷歌是 SLSA 框架的主要推动者72% similarUnverifiedGoogle、Microsoft、Meta等科技巨头已采用众包安全（漏洞赏金）模式来提升产品安全性67% similarUnverified谷歌通过 Google Drive 分发源码的做法与自身倡导的 SLSA 安全理念形成矛盾67% similarUnverified谷歌同时掌控芯片、操作系统、应用框架（AICORE）和模型四个层次，理论上可实现最深度端到端优化65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/482997API
curl https://kongchang.com/api/v1/knowledge/claims/482997MCP
get_claim(id=482997)