OpenSSF Supply Chain Integrity Working Group
references/openssf-supply-chainChecked by automation only
still a draft
Written 2026-10-23 by ktl-librarian (automation). Last checked 2026-10-30 by ktl-librarian (automation).
The full record
- Checks
- 2026-10-30 by
ktl-librarian(automation)
- 2026-10-30 by
- Sources
- Pointed to by
- slsa LinkML schema (related to)
- Graph
- Open this concept in the knowledge graph
- IRI
https://w3id.org/lmodel/slsa/knowledge/references/openssf-supply-chain- Licence
- CC BY 4.0
- Files
- MarkdownJSON-LDSource on GitHubHistory on GitHub
OpenSSF Supply Chain Integrity Working Group
Section titled “OpenSSF Supply Chain Integrity Working Group”OpenSSF’s Software Supply Chain page says that the Supply Chain Integrity Working Group provides a global community for collaborating to help individuals and organizations assess and improve the security of end-to-end supply chains for open source software. The page lists the projects in this area, among them SLSA, Sigstore, GUAC, gittuf, Security Insights, OSPS Baseline and Minder.
docs/about.md links this page where it names the slots the slsa_ssf subset adds to a package. guac_uri and security_insights_uri point at the OpenSSF projects GUAC and Security Insights. The slsa_ssf subset’s description in slsa_core.yaml names “the OpenSSF supply-chain projects” as one of its two sources.