slsa-framework/slsa

Clarify the connection between the Build and BuildEnv tracks

Opened this issue · 0 comments

I read this initially as build L2 for the artifacts being generated, not for the build image. I think that this is because I was looking for a connection/commentary on how the BuildEnv and Build tracks support each other. Should we explicitly state this somewhere?

Originally posted by @arewm in #1115 (comment)