OpenSSF SLSA Workshop @ 2024 Open Source Security Summit North America

This is the landing page for the OpenSSF SLSA Workshop hosted at the 2024 Open Source Security Summit North America on April 15.

If you like the workshop and tutorials, let us know with a star!

If you encounter problems or there are features you would like to see, create an issue.

Skills required

Virtually none. If you have not coded in a while, you can still follow the workshop. All hands-on activities have code that is ready to be run. All you'll need to do is clone repositories, update configurations and click GitHub buttons or run commands in a terminal to follow along.

Supporting materials

Slides for the workshop.

Installation

Install the necessary software.

Schedule

The schedule and presentations are available in the slides.

1. Presentation: Introduction to SLSA Page 4
2. Activity 01: Generate and verify SLSA provenance
3. Presentation: Publish and deployment policies Page 12
4. Activity 02: Publish policy
5. Activity 03: Deployment policy
6. Activity 04: Kyverno setup
7. Presentation: SLSA for AI Page 29
8. Activity 05: Model integrity protection