Threats & Mitigations¶
Community, S. (2023). Threats & Mitigations. SLSA Specification v1.0.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Mechanisms¶
- Provenance Attestation Check
- Its failure mode is inherited honesty: provenance is only as truthful as the builder that generated it. A compromised build platform can emit truthful-looking provenance for a poisoned build — garbage in, attested garbage out.
This sourceShows that compromise of the build process can inject malicious output and generate provenance that falsely attributes it to trusted inputs or processes.
- Its failure mode is inherited honesty: provenance is only as truthful as the builder that generated it. A compromised build platform can emit truthful-looking provenance for a poisoned build — garbage in, attested garbage out.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:66fec0431656 · see in the full table