SLSA track

Glossary termreferenceglossary/slsa-track

Checked by automation only

still a draft

Written 2026-10-23 by ktl-librarian (automation). Last checked 2026-10-30 by ktl-librarian (automation).

The full record

Checks

2026-10-30 by ktl-librarian (automation)

Sources

Defined by

SLSA specification

Graph

Open this concept in the knowledge graph

IRI

https://w3id.org/lmodel/slsa/knowledge/glossary/slsa-track

Licence

CC BY 4.0

Files

Markdown JSON-LD Source on GitHub History on GitHub

SLSA track

The specification copy’s about.md says that a SLSA track focuses on a particular aspect of a supply chain, such as the Build Track. tracks.md says that each track is composed of multiple levels, addresses different threats, and has its own set of requirements and patterns of use. It describes four tracks: Build, Source, Build Environment and Dependency.

The schema models the four tracks, each with a subset and a level enum: Build (slsa_build_track, SlsaBuildLevel), Source (slsa_source_track, SlsaSourceLevel), Dependency (slsa_dependency_track, SlsaDependencyLevel) and Build Environment (slsa_build_environment_track, SlsaBuildEnvironmentLevel). See SLSA level.