#slsa

GigaTap articles tagged slsa.

• Mini Shai-Hulud: Where SLSA L2 Breaks - Valid SLSA attestations did not prevent a CI/CD compromise. Cache poisoning and token leakage exposed the limits of SLSA L2 isolation assumptions.