Community

There’s an active community of members, contributors and collaborators behind the SLSA framework. We’re drawn together by the shared goals of improving software supply chain security and codifying best practices for development, deployment and governance, all collaborating on an objective framework that works for open source projects and organizations, influences policy and regulations, empowers engineers and builds for the future.

Get involved

The SLSA project is an open source project that strives to make useful and practical standards, tools, and documentation to reduce software supply chain risk in the real world. To succeed, we rely on contributors from a variety organizations to help us improve. Whether that’s reporting successes or challenges, contributing changes to the specification or documentation, or developing tooling, we welcome your contributions.

How to contribute

For questions, suggestions, or status updates, please use one of the following channels.

Contribution guidelines Specification meeting (weekly) GitHub issues (tracks all work) Slack (#slsa) Mailing list

Archived meeting notes

The SLSA community no longer holds these meetings regularly. Their meeting notes are archived here for posterity.

Community meeting Tooling Special Interest Group

“SLSA’s really the first of its kind, a framework for supply chain and build integrity. What sets it apart is the thriving community behind it, and it’s resonating with different organizations.”

Kim Lewandowski

Founder, Chainguard

Media

Operation SLSA: Episode 1

Operation SLSA: Episode 2

Getting Started with Supply Chain Security is Easier Than You... Michael Lieberman & Timothy Miller

Spicing up Container Image Security with SLSA & GUAC - Ian Lewis, Google