Today we’re releasing the SLSA Version 1.1 RC2 for public review. We are seeking comments on these spec changes by April 18, 2025. This release brings several changes aimed at enhancing the clarity and usability of the original specification. It also introduces backwards-compatible clarifications to the SLSA threat model, attestation model and verification procedure. This includes the addition of verifier metadata to the Verification Summary Attestation (VSA) format. Please, refer to the Wh...