5 docs tagged with "slsa"

Structured identification, analysis and mitigation of threats during the development lifecycle

Principles, practices and controls for building, validating and running images in a secure, auditable and traceable way

Strategies and practices for continuously validating application security through automated, manual and offensive testing.

Security practices for the definition, validation and management of infrastructure as code

Strategies and practices for continuously validating application security through automated, manual and offensive testing