SLSA (Supply-chain Levels for Software Artifacts) is a security framework and specification of progressive levels for hardening software build and release pipelines. It defines requirements and provenance attestations to prevent tampering.