Current situation
Supply chain security and provenance is a priority for amp-devcontainer, but no formal assessment against the SLSA framework has been conducted.
Required situation
Documented compliance with SLSA Level 3 is available, and a roadmap to become SLSA Level 4 compliant is in-place.
Acceptance criteria
- Requirements are updated with the targeted SLSA version and level
- Compliance is documented and linked, where possible, with the corresponding requirements and tests
- SLSA badge is added to the README
Current situation
Supply chain security and provenance is a priority for amp-devcontainer, but no formal assessment against the SLSA framework has been conducted.
Required situation
Documented compliance with SLSA Level 3 is available, and a roadmap to become SLSA Level 4 compliant is in-place.
Acceptance criteria