# slsa levels

Published articles for slsa levels.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment

DevFeed: [Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment](<https://devfeed.tech/articles/elastic-partners-with-chainguard-on-software-supply-chain-security-and-slsa-assessment-13026.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/elastic-partners-with-chainguard-on-software-supply-chain-security-and-slsa-assessment>)

Published: 2023-07-26T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Security](<https://devfeed.tech/topics/security.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [slsa-assessement](<https://devfeed.tech/tags/slsa-assessement.md>), [slsa-levels](<https://devfeed.tech/tags/slsa-levels.md>), [software-artifact-signing](<https://devfeed.tech/tags/software-artifact-signing.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [trust](<https://devfeed.tech/tags/trust.md>)

### AI overview

Elastic partnered with Chainguard to assess its software supply chain using the SLSA framework. The article describes supply-chain risks across source, build, dependencies, and packages, and highlights software artifact signing with Sigstore as a security measure.

### Source excerpt

Elastic and Chainguard unite for enhanced software supply chain security and SLSA assessment.

## An enhanced Chainguard Academy learning experience

DevFeed: [An enhanced Chainguard Academy learning experience](<https://devfeed.tech/articles/an-enhanced-chainguard-academy-learning-experience-12869.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/an-enhanced-chainguard-academy-learning-experience>)

Published: 2023-06-22T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Learning](<https://devfeed.tech/topics/learning.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-academy](<https://devfeed.tech/tags/chainguard-academy.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [security](<https://devfeed.tech/tags/security.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [slsa-levels](<https://devfeed.tech/tags/slsa-levels.md>), [software-education](<https://devfeed.tech/tags/software-education.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [ssdf](<https://devfeed.tech/tags/ssdf.md>)

### AI overview

Chainguard announces an enhanced Chainguard Academy with a redesigned user experience, improved navigation, topic pages, and expanded educational resources covering software security, software supply chain security, SLSA, SSDF, SBOMs, apko, and Wolfi. The article also highlights ongoing product documentation updates for Chainguard Images and Chainguard Enforce.

### Source excerpt

Catch the latest updates from Chainguard Academy, including a new design and software security resources for SLSA, SSDF and more.

## Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projects

DevFeed: [Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projects](<https://devfeed.tech/articles/chainguard-and-cncf-conduct-slsa-assessments-for-argo-and-prometheus-projects-12923.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-and-cncf-conduct-slsa-assessments-for-argo-and-prometheus-projects>)

Published: 2023-04-19T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Prometheus](<https://devfeed.tech/topics/prometheus.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Security](<https://devfeed.tech/topics/security.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>)

Tags: [argo](<https://devfeed.tech/tags/argo.md>), [argo-cd](<https://devfeed.tech/tags/argo-cd.md>), [audits](<https://devfeed.tech/tags/audits.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [cncf](<https://devfeed.tech/tags/cncf.md>), [github](<https://devfeed.tech/tags/github.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [prometheus](<https://devfeed.tech/tags/prometheus.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [slsa-levels](<https://devfeed.tech/tags/slsa-levels.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [supply-chain-integrity](<https://devfeed.tech/tags/supply-chain-integrity.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

### AI overview

Chainguard and CNCF assessed the software supply chain security of the Argo CD and Prometheus projects using the SLSA framework. Argo CD achieved SLSA Level 3 for source, build, and provenance, while Prometheus achieved Level 3 for source and build; the assessment recommended adding provenance generation to Prometheus build infrastructure.

### Source excerpt

Chainguard and the CNCF partnered to conduct security assessments of Argo and Prometheus to ensure open source software projects apply security best practices.