terraform HashiCorp Blog · · 1.16.0

Packer v1.16.0 Adds SLSA Provenance Verification and HCL2 Features

blogsecuritygaengineer
feature

Packer v1.16.0 introduces native SLSA provenance generation and verification capabilities for machine images. This enhancement significantly boosts supply chain security by ensuring the authenticity and integrity of built images. Additionally, the release brings new HCL2 features specifically for provisioners and variables, offering greater flexibility and expressiveness in Packer configurations. These updates are crucial for engineers and architects leveraging Packer to automate their machine image creation workflows.

  • SLSA Provenance for Machine Images
  • New HCL2 Features for Provisioners and Variables
Features (2)
  • SLSA Provenance for Machine Images

    Packer v1.16.0 now includes native support for generating and verifying SLSA provenance for machine images. This capability helps ensure the trustworthiness and integrity of machine images throughout the software supply chain.

  • New HCL2 Features for Provisioners and Variables

    The release adds new HCL2 language features, specifically enhancing how provisioners and variables can be defined and used within Packer configurations. These additions provide more advanced customization and control over image build processes.

Read the original announcement →

https://www.hashicorp.com/blog/packer-v1160-brings-verifiable-provenance-to-machine-images

Related releases