A tailored course, built for your situation
Standing Reference on SLSA for Engineering Leaders
Become the internal authority on secure software supply chain frameworks others consult first
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Engineering-adjacent program leader in a high-velocity software org, trusted across teams but not formally in security or architecture
Who this is not for
Dedicated software supply chain security engineers who already own SLSA rollout, or ICs focused exclusively on tooling configuration
What you walk away with
- Recognized as the first internal name for SLSA interpretation and application
- Proven templates to implement SLSA levels 1-4 across diverse build environments
- Internal credibility to guide engineering teams without being in their chain of command
- Documented framework for evaluating build integrity claims from vendors and open-source projects
- Repeatable process to align security, engineering, and product on SLSA adoption milestones
The 12 modules (with all 144 chapters)
Module 1. SLSA Fundamentals and Real-World Adoption Patterns
Understand why SLSA is gaining traction across cloud-native environments, with specific examples from large-scale software delivery organizations. Learn how maturity differs from theoretical compliance.
12 chapters in this module
- Origins of SLSA at Google
- Why not SBOMs alone suffice
- Key stakeholders in adoption
- Level 1 vs Level 4 scope
- How Atlassian teams approach build integrity
- Common missteps in rollout
- Vendor pressure points
- Open source project readiness
- Internal resistance patterns
- Executive questions to anticipate
- Mapping to NIST SSDF
- First-mover advantage cases
Module 2. Provenance Deep Dive
Master the technical and procedural foundations of provenance in SLSA, focusing on build systems and artifact attestation. Gain confidence in evaluating claims.
12 chapters in this module
- What provenance really means
- Build platform requirements
- Attestation formats compared
- Signing pipeline outputs
- Timestamp authority role
- Verifying third-party claims
- Internal logging standards
- Toolchain integration points
- K8s-native build setups
- CI system audit trails
- Evidence collection workflow
- Common gaps in attestation
Module 3. Build Integrity Assurance
Ensure builds are reproducible and tamper-evident. Learn how to validate environment integrity and enforce controls across CI workflows.
12 chapters in this module
- Reproducibility reality check
- Docker layer hashing
- Base image provenance
- Controlled build environments
- Secrets in pipeline protection
- Vulnerability scanning triggers
- Binary transparency logs
- Build metadata completeness
- Container signing workflows
- Time-bound build validity
- Rebuild validation timing
- Audit trail completeness
Module 4. Source Authenticity and Protection
Secure the earliest link in the chain: source control. Implement policies that ensure only authorized changes enter the pipeline.
12 chapters in this module
- Git history integrity
- Signed commits at scale
- Branch protection rules
- PR approval chains
- Automated gate enforcement
- Emergency bypass logging
- Fork protection patterns
- Monorepo vs polyrepo trade-offs
- Code ownership validation
- Reviewer authority levels
- Audit-ready history logs
- Supply chain hijacking examples
Module 5. SLSA Level Mapping and Progression
Guide teams through realistic level progression. Understand what each level requires in practice, not just on paper.
12 chapters in this module
- Level 1 as entry point
- Level 2 timestamp requirements
- Level 3 attestation depth
- Level 4 build redundancy
- Team readiness assessment
- Tooling maturity benchmarks
- Cross-org coordination needs
- Security review gates
- Documentation expectations
- External validation prep
- Internal certification process
- Roadmap alignment techniques
Module 6. Integrating SLSA with Existing CI/CD
Adapt SLSA to existing pipelines without halting delivery. Learn where to start and what to prioritize.
12 chapters in this module
- CI system compatibility
- Jenkins plugin ecosystem
- GitHub Actions integration
- GitLab CI enhancements
- Buildkite adaptability
- Argo Workflows support
- Monitoring integration points
- Failure mode detection
- Rollback preparedness
- Significance of uptime logs
- Pipeline observability
- Alerting on attestation gaps
Module 7. Vendor and Third-Party SLSA Assessment
Evaluate external partners using SLSA as a benchmark. Gain leverage in procurement and integration decisions.
12 chapters in this module
- Requesting SLSA attestations
- Validating provided proofs
- Gaps in vendor documentation
- Escalation paths for non-compliance
- Minimum bar for onboarding
- Open source library evaluation
- Transitive dependency risks
- SBOM correlation with SLSA
- Third-party audit reports
- Certification reciprocity
- Contractual obligations
- Liability implications
Module 8. Internal Advocacy and Change Management
Lead SLSA adoption without formal authority. Build coalitions and overcome inertia using proven influence tactics.
12 chapters in this module
- Identifying early adopters
- Engineering team motivations
- Security team alignment
- Product manager incentives
- Leadership messaging
- Pilot project selection
- Success metric definition
- Feedback loop design
- Documentation ownership
- Training rollout timing
- Champion network growth
- Metrics for buy-in
Module 9. Policy Design for SLSA Compliance
Write policies that stick. Translate framework requirements into enforceable, maintainable standards.
12 chapters in this module
- Policy scope definition
- Enforceable vs aspirational
- Version control for policies
- Review cycle cadence
- Exception handling process
- Automated compliance checks
- Staged rollout plans
- Metrics for adherence
- Audit trail requirements
- Stakeholder sign-off
- Legal team alignment
- Policy decomposition patterns
Module 10. Auditing and Continuous Verification
Design audit processes that verify SLSA compliance without slowing delivery. Focus on automation and repeatable checks.
12 chapters in this module
- Audit scope planning
- Sampling vs full verification
- Automated attestation checks
- Log retention policies
- Incident response triggers
- Tooling for continuous check
- False positive handling
- Remediation workflows
- Audit report templates
- Stakeholder distribution
- Regulatory alignment
- Lessons from real audits
Module 11. Scaling SLSA Across Teams
Extend SLSA adoption beyond pilot teams. Manage complexity and ensure consistency without central bottleneck.
12 chapters in this module
- Center of excellence model
- Internal training design
- Template sharing patterns
- Cross-team sync meetings
- Standardization vs flexibility
- Ownership model options
- Knowledge transfer workflows
- Support channel structure
- Metrics for scale
- Tooling standardization
- Documentation portals
- Lessons from early adopters
Module 12. Future-Proofing and Framework Evolution
Stay ahead of changes in SLSA and related standards. Position yourself as the long-term steward of supply chain security.
12 chapters in this module
- SLSA roadmap awareness
- NIST SSDF alignment
- CISA guidance updates
- Industry working groups
- OpenSSF contributions
- Version transition planning
- Deprecation timelines
- Feedback to maintainers
- Alternative frameworks
- Insurance requirement trends
- Legal precedent tracking
- Adaptation playbooks
How this maps to your situation
- When engineering teams resist new build constraints
- Before vendor software is approved for integration
- During security audit prep cycles
- After a supply chain incident elsewhere in the sector
Before vs. after
Before
SLSA discussions feel fragmented, with unclear ownership and inconsistent application across teams.
After
You're the recognized practitioner others turn to for guidance, with a documented approach that scales across contexts.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for integration into real-world delivery cycles.
If nothing changes
Without structured knowledge, SLSA efforts remain ad hoc, limiting influence and leaving gaps in supply chain assurance just as scrutiny increases.
How this compares to the alternatives
Unlike generic compliance courses, this focuses on practitioner-level SLSA application with templates and decision frameworks you can use immediately in engineering environments.
Frequently asked
Is this course technical?
It's designed for program and delivery leaders who need to understand and guide technical implementation without doing the hands-on work.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I apply this outside Atlassian?
Yes. The reasoning, templates, and frameworks are built for any software delivery organization facing supply chain assurance demands.
$199 one-time. Approximately 3 hours per module, designed for integration into real-world delivery cycles..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours