{"id":"cloudbuild-supply-chain-security-ephemeral-attested","text":"Cloud Build achieves supply chain security through three mechanisms: ephemeral build VMs with no residual state, SLSA level 3 attestation providing verifiable container provenance, and trigger service account precedence preventing config-level privilege escalation.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudbuild-supply-chain-security-ephemeral-attested","truth_value":"IN","reason":"premise"}]}}