Search results

Group SLSA Source Track requirements into higher level abstractions

clarificationClarification of the spec, without changing meaningClarification of the spec, without changing meaning

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1509 In slsa-framework/slsa;

· TomHennen opened on Nov 4, 2025

Clarify role of attestations in SLSA

Status: Open.

#1508 In slsa-framework/slsa;

· adityasaky opened on Nov 3, 2025

SLSA Framework in New CD Foundation Cybersecurity Guide

Status: Open.

#1507 In slsa-framework/slsa;

· k8scarcella opened on Oct 31, 2025

Explain, how this related to GitHub's new "built-in" artifact attestation (update docs/website)

websiteIssues with the slsa.dev websiteIssues with the slsa.dev website

Status: Open.

#1501 In slsa-framework/slsa;

· rugk opened on Oct 22, 2025

Workstream: Verifier Track

workstreamMajor effort comprising multiple sub-issuesMajor effort comprising multiple sub-issues

Status: Open.

#1495 In slsa-framework/slsa;

· adriandiglio opened on Oct 16, 2025

Define how SLSA _source_ properties should be incorporated into the VSAs for built artifacts

source-track

Status: Open.

#1492 In slsa-framework/slsa;

· TomHennen opened on Oct 13, 2025

SLSA E2E RFE with the in-toto Policy Framework and Verifier

Status: Open.

#1486 In slsa-framework/slsa;

· 0xSecure1 opened on Sep 28, 2025

Ensure capitalization of defined terms is consistent in source track

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1480 In slsa-framework/slsa;

· TomHennen opened on Sep 6, 2025

Requirements of SLSA in spreadsheet or tabular format

Status: Open.

#1473 In slsa-framework/slsa;

· teavanist opened on Aug 12, 2025

Source Track: Suggested reorganization

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1459 In slsa-framework/slsa;

· MarkLodato opened on Jul 14, 2025

Should dependency track level 1 just be "Has an SBOM with build dependencies..."

Status: Open.

#1457 In slsa-framework/slsa;

· TomHennen opened on Jun 26, 2025

optional: Should the requirement titles be more active?

Status: Open.

#1452 In slsa-framework/slsa;

· adriandiglio opened on Jun 26, 2025