Skip to content

Enum: SlsaBuildEnvironmentLevel

The levels of the SLSA Build Environment track, each extending integrity further into the compute that runs builds.

URI: slsa:SlsaBuildEnvironmentLevel

Value Meaning Description
SLSA_BUILD_ENV_LEVEL_0 None No Build Environment track claims
SLSA_BUILD_ENV_LEVEL_1 None The build image has signed build provenance, protecting against tampering whi…
SLSA_BUILD_ENV_LEVEL_2 None The compute platform attests to the environment’s state at boot, protecting a…
SLSA_BUILD_ENV_LEVEL_3 None Trusted hardware attests to the host’s state, protecting against tampering th…
Name Description
build_env_level The SLSA Build Environment level this meets
name: SlsaBuildEnvironmentLevel
description: The levels of the SLSA Build Environment track, each extending integrity
further into the compute that runs builds.
in_subset:
- slsa_build_environment_track
from_schema: https://w3id.org/lmodel/slsa
see_also:
- https://slsa.dev/spec/draft/build-env-track-basics#track-overview
rank: 1000
permissible_values:
SLSA_BUILD_ENV_LEVEL_0:
text: SLSA_BUILD_ENV_LEVEL_0
description: No Build Environment track claims.
SLSA_BUILD_ENV_LEVEL_1:
text: SLSA_BUILD_ENV_LEVEL_1
description: The build image has signed build provenance, protecting against tampering
while the image is distributed.
SLSA_BUILD_ENV_LEVEL_2:
text: SLSA_BUILD_ENV_LEVEL_2
description: The compute platform attests to the environment's state at boot,
protecting against tampering through the control plane.
SLSA_BUILD_ENV_LEVEL_3:
text: SLSA_BUILD_ENV_LEVEL_3
description: Trusted hardware attests to the host's state, protecting against
tampering through the host interface.