One of the major issues facing the DoD is the issue of software provenance, or specifically the lack thereof. This L&L session examines the security assurance attributes that a software product possesses from its origin and through the supply chain. We examine use of that attribute information to establish the provenance of the software product.