Tag
1Case Study
#Cicd
Hardening a CI/CD Supply Chain to SLSA Level 3
The question that started this was from an auditor, and it was a fair one: can you prove that the container running in production is the one your pipeline built from the commit you think it was? We ha