SLSA Courses and Certifications

OpenSSF

Path to SLSA 4 - How Tekton Secures the Software Supply Chain

Discover how Tekton implements SLSA security levels through signed attestations, hermetic builds, and trusted resources to secure CI/CD pipelines and software supply chains.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Secure Your Bazel Artifacts Using SLSA

Discover how to protect your build artifacts with SLSA framework, generating provenance that links artifacts to builders and workflows, enhancing supply chain security for Bazel projects.

• YouTube
• 25 minutes
• On-Demand
• Free Video

OpenSSF

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1

Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.

• YouTube
• 11 minutes
• On-Demand
• Free Video

A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security

Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime

Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Eclipse Foundation

Secure Development in Open Source - The Road to SLSA Level 3 Compliance for Eclipse Temurin

Discover how Eclipse Temurin achieves SLSA Level 3 compliance through secure development practices, cloud-based Jenkins implementations, and open-source distribution methods across multiple platforms.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Securing the Modern Software Supply Chain: A Beginner's Guide to SLSA, SBOM, and Beyond

Explore the fundamentals of software supply chain security, understanding SLSA, SBOM, and Sigstore while gaining practical insights into tools and methodologies for modern development security.

• YouTube
• 16 minutes
• On-Demand
• Free Video

Conf42

Supply Chain Defense by Default - SBOMs, SLSA, CI/CD

Discover how to implement defense-by-default strategies using SBOMs, SLSA framework, and CI/CD security controls to strengthen your software supply chain against threats.

• YouTube
• 12 minutes
• On-Demand
• Free Video

The State of Git Security With SLSA and Gittuf

Explore Git security beyond forge platforms using gittuf and SLSA Source Track to implement repository policies, read permissions, and standardized source provenance verification.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Strengthening Supply Chain for Kubernetes - Cross-Cloud SLSA Attestation Verification

Discover how to secure Kubernetes workloads through SLSA attestation verification using Notary Project and Ratify for cross-cloud supply chain protection.

• YouTube
• 32 minutes
• On-Demand
• Free Video

OWASP Foundation

Analyzing Google's SLSA Framework for Securing Software Supply Chains

Explore Google's SLSA framework for securing software supply chains, covering key areas, controls, and additional considerations beyond the framework's scope.

• YouTube
• 20 minutes
• On-Demand
• Free Video

An Overview on SLSA

Explore SLSA methodology for preventing software supply chain tampering, illustrated through gremlin scenarios and demonstrating how SLSA controls raise attack costs and ensure security.

• YouTube
• 15 minutes
• On-Demand
• Conference Talk

SLSA Conformance - Understanding Build System Requirements and Trust Decisions

Explore SLSA framework for software artifact integrity, build system requirements, conformance program, and trust decision enforcement in supply chain security.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Lessons Learned from Automating SLSA-Compliance Evaluation

Explore automating SLSA-compliance evaluation, covering provenance, pipeline dynamics, and challenges in implementing various SLSA levels. Gain insights on evidence-based trust and unfalsifiable provenance.

• YouTube
• 42 minutes
• On-Demand
• Free Video

DevSecCon

Securing Software Supply Chains Using the SLSA Framework

Implement SLSA framework to secure software supply chains. Learn practical, vendor-neutral examples for code, build process, provenance, and deployment to create a resilient software development lifecycle.

• YouTube
• 20 minutes
• On-Demand
• Free Video