Skip to content

Commit

Permalink
Merge pull request #121 from annkots/master
Browse files Browse the repository at this point in the history
Update README.md
  • Loading branch information
annkots authored Feb 6, 2025
2 parents 7227d99 + 1bd4ba4 commit 32aa2cf
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions docs/els-for-languages/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -1867,8 +1867,10 @@ Handling Multiple Vulnerabilities: In cases where several CVEs are reported simu
TuxCare's commitment to transparency and visibility is foundational to our ELS for .NET offering. We aim to provide comprehensive details about how each package is built, verified, and distributed, ensuring complete trust in the software supply chain.

* **SLSA Compliance**: All packages are built and signed to ensure verifiable Supply-chain Levels for Software Artifacts (SLSA) compliance. They are securely constructed from vetted sources, include attestations for all dependencies, and undergo continuous testing to maintain integrity and security.
* **Software Bill of Materials (SBOM)**: We provide complete visibility into the software supply chain with a comprehensive inventory of every package in the codebase, ensuring transparency and accountability in your software ecosystem. _Note: Availability is planned for Q2 2025_.
* **Verifiable Integrity and Provenance**: Our packages and metadata provide comprehensive end-to-end provenance, detailing how each package was constructed and tested, ensuring that all components in your software stack are trustworthy. _Note: Availability is planned for Q2 2025_.
* **Software Bill of Materials (SBOM)**: We provide complete visibility into the software supply chain with a comprehensive inventory of every package in the codebase, ensuring transparency and accountability in your software ecosystem.
<span style="color: red;">_Note: Availability is planned for Q2 2025._</span>
* **Verifiable Integrity and Provenance**: Our packages and metadata provide comprehensive end-to-end provenance, detailing how each package was constructed and tested, ensuring that all components in your software stack are trustworthy.
<span style="color: red;">_Note: Availability is planned for Q2 2025._</span>
* **Secure Distribution**: Signed versions of the packages and their metadata are distributed from a registry managed, secured, and protected by TuxCare, guaranteeing that your software updates are authentic and untampered.

### Technical Support
Expand Down

0 comments on commit 32aa2cf

Please sign in to comment.