Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Spice Check - Building an End-to-End SLSA Implementation

OpenSSF via YouTube

Start learning Write review
Coursera Ad

AI, Data Science & Cloud Certificates from Google, IBM & Meta

Learn More → Corporate Finance Institute Ad

Learn Excel and Financial Modeling the Way Finance Teams Actually Use Them

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
Learn to implement end-to-end SLSA (Supply-chain Levels for Software Artifacts) protection for software projects in this conference talk. Explore the newly released SLSA 1.2 specification and its source track capabilities, which enable comprehensive security policies from source code to release. Discover how to use the AMPEL policy engine to enforce protections at each stage of the software development lifecycle using signed, verifiable evidence. Walk through practical implementation of community-curated policies that provide complete software factory protection with minimal code requirements. Understand how to leverage unforgeable evidence and attestation data from various tools to harden software repositories and builds, creating a robust security framework for modern software supply chains.

Syllabus

Spice Check: Building an E2E SLSA Implementation - Adolfo García Veytia, Carabiner Systems

Taught by

OpenSSF

Reviews

Start your review of Spice Check - Building an End-to-End SLSA Implementation

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.