From 130b63ade620f4a2619233feb3e5e4ea56d58983 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Mon, 23 Feb 2026 18:59:25 +0100
Subject: Readme vergessen

---
 PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc')

diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc b/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
index 59e3da1..fe1010a 100644
--- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
+++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/README.adoc
@@ -23,3 +23,17 @@ Evil Black Hat hacks the webserver, and swaps the ISO image for a manipulated on
 The manipulated Signature verifies the fake-integrity of the manipulated ISO image, but not the authenticity. 
 
 image::300-NetBSD-RelEng-STRIDE.png[]
+
+
+
+
+== Supply-chain Levels for Software Artifacts
+
+A simple threat model for SLSA Level 1 and Leve 4 build and distribution pipelines. 
+
+image::200-ThreatModel-SLSA1-DownloadSig.png[]
+
+
+
+image::201-ThreatModel-SLSA4-ReproducibleBuilds.png[]
+
-- 
cgit v1.2.3

