## Problem The page located at [GitLab SLSA](https://docs.gitlab.com/ci/pipeline_security/slsa/) mixes information about SLSA L1 attestations and L3 attestations. Additionally, there's not enough information on L3 attestations. ## Proposal We need to add documentation on how to attest: * Artifacts * Containers The page located at [GitLab SLSA](https://docs.gitlab.com/ci/pipeline_security/slsa/) should have a section that relates to the Level 3 attestations that glab will be able to provide. In this section there should be a link to a page that covers: * the steps that users must follow to achieve SLSA L3 builds, and how to modify their `.gitlab-ci.yml` to achieve this. * how to use the `glab attestation verify` command to verify their attestations, both for artifacts and containers. * [SLSA provenance specification](https://docs.gitlab.com/ci/pipeline_security/slsa/provenance_v1/) should be brought in to this section ## Who can address the issue Once this is done the L3 and L1 sections should be clearly separated so that users can access documentation for both separately. <!-- What if any special expertise is required to resolve this issue? --> ## Other links/references <!-- For example, related GitLab issues/MRs -->