slsa-framework
SLSA Framework in New CD Foundation Cybersecurity Guide
Dear maintainers of SLSA Framework,
Our group at the Continuous Delivery Foundation created a CI/CD Cybersecurity Guide and the OpenSSF projects are featured in it.
[Request] Please double check that we categorized your project properly (or didn’t forget any). https://cd.foundation/cybersecurity/
If you like our work, please share it with others
Sample social post: Do DevSecOps the right way. Follow this CI/CD Cybersecurity Guide from the CD Foundation. https://cd.foundation/blog/2025/09/30/cybersecurity-guide/
TODO:
- Check if it's categorized properly (if at all).
- Ensure it's not too specific and point back to SLSA
- See if they should link to some else like the Security Baseline.
@k8scarcella, I don't see SLSA mentioned anywhere in the https://cicd-cybersecurity.netlify.app/cicd-security-guide/ off hand. Do you know if SLSA is mentioned anywhere that I didn't find?
Most of the links seemed to be about specific tools. As SLSA is not a tool, do you think that there would be a good location to call out a framework as only the SSDF is mentioned across the stages, i.e. https://cicd-cybersecurity.netlify.app/cicd-security-guide/phase-1/ssdf/ ?
