Skip to content

v1.42.0 — fusaops slsa

Choose a tag to compare

@SoundMatt SoundMatt released this 14 Jun 01:06
· 129 commits to main since this release

fusaops slsa — SLSA supply-chain gap report

  • slsa package — Level, Objective, Report types; Assess(projectRoot, project, level) evaluates 10 SLSA v1.0 objectives across L1–L4 (version control, module file, provenance, SBOM, CODEOWNERS, artifact integrity, evidence bundle); Render (text/json). (REQ-FO-SLSA001, REQ-FO-SLSA002, REQ-FO-SLSA003)
  • fusaops slsa [--dir DIR] [--level L1|L2|L3|L4] [--format text|json] [--output FILE] — multi-language SLSA gap report; exits 1 when gaps remain. (REQ-FO-CLI057)
  • fusaops capabilities updated with slsa command and text/json formats.
  • Mirrors gofusa slsa adapted for the FuSaOps multi-language project context.

Requirements: 281 total · Coverage: 81.7%