Secure Your Bazel Artifacts Using SLSA

This 25-minute Linux Foundation talk explores how to combat the 700+% year-over-year increase in supply chain attacks by implementing the SLSA framework with Bazel builds. Learn how to generate provenance for build artifacts, connecting each artifact to its builder's identity and the automated workflow used in the process. Discover a solution that automatically adds SLSA provenance to any Bazel project using GitHub Actions, enabling reproducible build verification and increasing confidence that artifacts remain free from backdoors or malware. Presented by speakers Mihai Maruseac and Noah Elzner, this presentation offers practical approaches to securing the entire software development lifecycle.