Jay White

Differentiation between security framework, compliance requirements, maturity model

4

Submitted on behalf of the SCI Positioning SIG There may be a need to discuss in what instances SLSA is a Security Framework, are a set of Compliance Requirements, or...

We need a process flow for specs to become standards

12

We need a process for a spec created in a Project to become a standard. We can build out what this looks like, but there should a way for the...

Deprecation Policy for archiving projects, SIGs, WGs

6

We may want to consider a deprecation policy for projects, SIGs , or WGs where possible. This would aid in the justification for archiving and allow for a proposed date...

provided a little more generality and less branding to the framework intro.

SLSA Spec team. I've been at this for years now but I am adding this here again as an opportunity has come up given the recent publishing of ISO 18974...

[Technical Initiative Funding Request] - S2C2F PAS Submission Funding Request

15

### Problem Statement S2C2F requires 4k in funding to pay the JDF contracted ISO Editor to help form the correct language in the S2C2F Specification in preparation for ISO PAS...

Discussion on path to S2C2F aligning with SLSA as its dependency track

9

Based on discussions within the Supply Chain integrity working group and S2C2F Project we wanted to open discussions on a path for S2C2F to align with SLSA as its dependency...