Search results

Register dataset & blueprint provenance (DOI + OTS) and guidance for research-data SLSA

Status: Open.

#1478 In slsa-framework/slsa;

· danieleduardocampospenuelas11 opened on Aug 24, 2025

Mapping public SHA-256 + OpenTimestamps attestations to SLSA guidance (request for spec pointers) (SLSA’s repo README confirms Issues are the main tracker.)

Status: Open.

#1477 In slsa-framework/slsa;

· danieleduardocampospenuelas11 opened on Aug 23, 2025

Requirements of SLSA in spreadsheet or tabular format

Status: Open.

#1473 In slsa-framework/slsa;

· teavanist opened on Aug 12, 2025

SLSA Source Track should address binaries being stored in source repos

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1467 In slsa-framework/slsa;

· TomHennen opened on Jul 18, 2025

Source Track: Continuity requirement is unclear

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1466 In slsa-framework/slsa;

· MarkLodato opened on Jul 18, 2025

Making (sub-sub-)section structured information more visible

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1465 In slsa-framework/slsa;

· eskultety opened on Jul 18, 2025

Question: On 'Potential Change Management Controls'

slsa 1.2-RC1 feedback

Status: Open.

#1464 In slsa-framework/slsa;

· eskultety opened on Jul 18, 2025

Source Track: <code>source_refs</code> should be in the predicate

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1463 In slsa-framework/slsa;

· MarkLodato opened on Jul 14, 2025

Source Track: some definitions are too git-specific

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1461 In slsa-framework/slsa;

· MarkLodato opened on Jul 14, 2025

Source Track: virtually any package registry meets Source L1

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1460 In slsa-framework/slsa;

· MarkLodato opened on Jul 14, 2025

Source Track: Suggested reorganization

slsa 1.2Required for SLSA 1.2 release. Please apply it liberally!Required for SLSA 1.2 release. Please apply it liberally!

slsa 1.2-RC1 feedback

source-track

Status: Open.

#1459 In slsa-framework/slsa;

· MarkLodato opened on Jul 14, 2025

Should dependency track level 1 just be "Has an SBOM with build dependencies..."

Status: Open.

#1457 In slsa-framework/slsa;

· TomHennen opened on Jun 26, 2025