Skip to content

Commit d72b89f

Browse files
committed
KEP-3027: Add one line motivation and update TOC
Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>
1 parent 37ccc10 commit d72b89f

File tree

1 file changed

+5
-2
lines changed
  • keps/sig-release/3027-slsa-compliance

1 file changed

+5
-2
lines changed

keps/sig-release/3027-slsa-compliance/README.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,7 @@ tags, and then generate with `hack/update-toc.sh`.
9797
- [SLSA Level 2: Tamper Resistance of the Build Service](#slsa-level-2-tamper-resistance-of-the-build-service)
9898
- [SLSA Level 3: Extra Resistance to Specific Threats](#slsa-level-3-extra-resistance-to-specific-threats)
9999
- [SLSA Level 4: Highest Levels of Confidence and Trust](#slsa-level-4-highest-levels-of-confidence-and-trust)
100+
- [Implementation History](#implementation-history)
100101
<!-- /toc -->
101102

102103
## Release Signoff Checklist
@@ -151,8 +152,8 @@ is a framework to harden software supply currently being defined by the
151152
Group](https://github.com/ossf/wg-digital-identity-attestation).
152153

153154
The framework provides requirements and recommendations to software
154-
build systems to harden the environments and processes that drive them.
155-
It also defines the metadata that needs to be produced to trace the
155+
build systems to harden their environments and the processes that drive
156+
them. It also defines the metadata that needs to be produced to trace the
156157
origins of every item in a software release.
157158

158159
The main goal of this enhancement is to provide downstream consumers of our
@@ -184,6 +185,8 @@ updates.
184185

185186
## Motivation
186187

188+
Release Kubernetes in a zero-trust environment.
189+
187190
Kubernetes releases represent key links in many software supply chains, not
188191
just for the project itself but also for consumers that derive, repackage and
189192
distribute our artifacts downstream. The project releases end-user artifacts

0 commit comments

Comments
 (0)