diff --git a/auth-setup.sh b/auth-setup.sh
old mode 100644
new mode 100755
diff --git a/slides/Slides.md b/slides/Slides.md
index cc7aea9..1e81491 100644
--- a/slides/Slides.md
+++ b/slides/Slides.md
@@ -177,11 +177,16 @@ Demo: [Online Parser](https://yaml-online-parser.appspot.com/)
 
 ---
 
+# Supply Chain Attacks
+
+![bg fit right:75%](image.png)
+
+---
+
 <!-- _footer: "https://docs.github.com/en/actions/security-guides" -->
 
 # Security
 
-
 <div class="columns">
 <div>
 
@@ -254,6 +259,43 @@ updates:
 
 ---
 
+# GitHub Well-Architected Framework
+
+![bg right fit](img/gh-waf.png)
+
+- **Community-driven guide** for deploying GitHub effectively.
+- Design principles
+- Framework pillars
+- Actionable, prescriptive advice
+
+---
+
+# GitHub Well-Architected Framework
+
+## Key Principles of the Framework
+
+<div class="columns"> 
+<div>
+
+- Security
+- Scalability
+- Automation
+- Collaboration
+
+</div>
+
+<div>
+
+- Observability
+- Performance
+- Governance
+- Innovation
+
+</div>
+</div>
+
+---
+
 # Questions
 
 ![bg auto](./img/background.jpg)
diff --git a/slides/image.png b/slides/image.png
new file mode 100644
index 0000000..d2d6a37
Binary files /dev/null and b/slides/image.png differ
diff --git a/slides/img/gh-waf.png b/slides/img/gh-waf.png
new file mode 100644
index 0000000..3b2a804
Binary files /dev/null and b/slides/img/gh-waf.png differ
diff --git a/slides/workshop.md b/slides/workshop.md
new file mode 100644
index 0000000..98ef67c
--- /dev/null
+++ b/slides/workshop.md
@@ -0,0 +1,27 @@
+# Agenda
+
+| **Time**   | **Activity**                                                                                     |
+|------------|--------------------------------------------------------------------------------------------------|
+| **1:00 PM** | **Recap and Basics**: Introduction to CI/CD and YAML basics. |
+| **1:15 PM** | Overview of workflows and runners.                                 |
+| **1:30 PM** | Explanation of workflows: events, jobs, and steps in GitHub Actions.                           |
+| **1:45 PM** | **Exercise**: Create a simple YAML workflow https://github.com/skills/test-with-actions          |
+| **2:00 PM** | **Exercise**: https://docs.github.com/en/actions/sharing-automations/creating-actions/creating-a-composite-action |
+| **2:15 PM** | **Introduction**: Overview of GitHub Packages and the GitHub Container Registry (GHCR). |
+| **2:30 PM** | **Supported Package Types**: Discuss the supported package types and how they integrate with GitHub repositories. |
+| **2:45 PM** | **Publishing Packages**:  |
+| **3:00 PM** | **Exercise**: https://github.com/skills/publish-packages  |
+| **3:15 PM** | **Deployment**: Examples of workflows for automated deployment.                             |
+| **3:30 PM** | Environments                                        |
+| **4:00 PM** | **Exercise**: https://github.com/codebytes/marp-slides-template             |
+| **4:15 PM** | **Security and Best Practices**:                         |
+| **4:30 PM** | Using Dependabot for action updates and workflow maintenance.                                  |
+| **4:45 PM** | **Exercise**:                      |
+| **5:00 PM** | Closing Q&A and sharing resources for further learning.                                        |
+
+## Resources
+
+- https://github.com/sdras/awesome-actions
+- https://github.com/actions
+- https://github.com/actions/starter-workflows
+- https://github.github.com/actions-cheat-sheet/actions-cheat-sheet.html