Where Should Source Attestations Live? Exploring Storage Strategies

Explore storage strategies for SLSA source attestations in this 11-minute lightning talk that examines where to store source code attestations after generation. Learn about different storage options including source repositories, remote APIs, and alternative locations while comparing source attestation storage to container attestation formats. Discover the security, discoverability, and tooling tradeoffs associated with each approach through analysis of existing source attestation tools. Gain practical insights to make informed storage decisions for your project or organization's source attestation implementation.