This is a big step forward. Enterprises have spent years trying to sense-check and control the open-source software they consume — now Google Cloud is doing some of that work for us, following the SLSA framework for supply-chain provenance.
Originally posted on LinkedIn
