San Francisco, California. The Open Source Security Foundation (OpenSSF) has published ratification 1.0 of Supply-chain Levels for Software Artifacts (SLSA). The OpenSSF SLSA solution delivers specifications for software supply chain security. The specifications are designed utilizing the expertise of community members.