SLSA is currently in alpha

Google has been using an internal version of SLSA since 2013 and requires it for all of Google’s production workloads.

We encourage the community to try adopting SLSA levels incrementally and to share your experiences back to us. We rely on feedback from other organizations to evolve SLSA and be more useful to more people. Please get involved!

We’re working on a public roadmap and will be sharing it here soon.