OpenSSF Community Day Europe 2026

Starting in 2025, the SLSA project overhauled the tool catalog it maintains, unveiling new libraries and utilities while sunsetting older repositories that were not maintained any longer.

The project has now overhauled the projects under the SLSA umbrella into a more coherent stack starting with the spec and definitions at the bottom all the way to community integrations at the top. This is what we call the SLSA Tooling Cake and it is filled in the middle with delicious developer tools and end-user CLI tools.

In this talk we'll go through each of the five layers of the cake understanding what each offers to different consumers types: tool designers, agents, developers, end users, integrators, ecosystem partners, etc

During the talk we will also show a brief demo of each of the CLI tools: onboarding a repo to SLSA Source, generating a build provenance attestation and verifying it with the new pluggable verifier. We will also see how the new conformance suite ensures the SLSA ecosystem produces compatible data.