Merge pull request slsa-framework#164 from TomHennen/recommend_source_l1

Make source control recommended at L1

Use GPL language for "readability".

Closes issue #9.