I published "Securing the software development lifecycle with Cloud Build and SLSA", an introduction to applying the SLSA levels to your Cloud Build pipeline.

https://cloud.google.com/blog/products/application-development/google-introduces-slsa-framework