Draft Version 1.0 of SLSA Open for Comments - Open Source Security Foundation

Supply-chain Levels for Software Artifacts (SLSA, pronounced “salsa”) is an OpenSSF project that provides specifications for software supply chain security, established by industry consensus. SLSA’s framework is organized into a series of levels that describe increasing security rigor. Version 0.1 of the SLSA specification has been out for some time. We’ve been steadily working in public on updates to SLSA to have a “version 1.0” ready. Now, we have a draft version 1.0, and we’re seeking your final feedback.

How To Implement 3 New Software Supply Chain Security Frameworks

Snyk and Linux Foundation present the State of Open Source Security Report 2022

OpenSSF Responds to the CISA RFC on Software Identification Ecosystem Analysis - Open Source Security Foundation

Shared success in building a safer open source community

Security Checks Simplified: How to Implement Best Practices with Ease

Bruno Domingues on LinkedIn: #iamintel #banking #financialservices

SLSA • Provenance

Linux Foundation Newsletter: March 2023

City of Norwalk Recreation and Parks Master Plan Draft by Nick Kuhn, PLA, CPRP - Issuu

SLSA Provenance Blog Series, Part 1: What Is Software Attestation

OpenSSF releases SLSA v1.0, adds software supply chain-specific tracks

Open Source Software Security Handbook – Best Practices for Securing Your Projects

Blog Archives - Page 11 of 20 - Open Source Security Foundation

All SUSE Products SLSA: Securing the Software Supply Chain

Bruno Domingues on LinkedIn: 1-Trillion Parameter AI Model Running