BCID & SLSA

[djhedges]

GCP documentation points to SLSA (https://slsa.dev) for verifying build provenance which is akin to BCID.
https://cloud.google.com/build/docs/securing-builds/generate-validate-build-provenance#validate_provenance_using_the_slsa_verifier

There are also Google Security blog posts tagged with BCID & GOSST (Google's Open Source Security Upstream Team).
https://security.googleblog.com/2022/04/how-to-slsa-part-1-basics.html
https://security.googleblog.com/2022/04/how-to-slsa-part-2-details.html
https://security.googleblog.com/2022/04/how-to-slsa-part-3-putting-it-all.html

I'm not sure what category this would belong under? DevOps maybe along side blaze?