HashiCorp Packer 1.16 Adds Native SLSA Provenance Generation and Verification for Machine Images
HashiCorp has released Packer v1.16.0, adding native support for generating, signing, and verifying SLSA provenance attestations for every image the tool builds. The release provides teams with a secure, tamper-proof record of how a machine image was made. It does this without needing extra supply-chain tools. By Claudio Masolo
We haven't written up this one. InfoQ has the full story — the link below goes straight to it.
