diff --git a/README.md b/README.md
index 34bc41e..79313f0 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,7 @@
[](https://api.securityscorecards.dev/projects/github.com/slsa-framework/slsa-verifier)
[](https://bestpractices.coreinfrastructure.org/projects/6729)
[](https://goreportcard.com/report/github.com/slsa-framework/slsa-verifier)
-[](https://slack.com/app_redirect?team=T019QHUBYQ3&channel=slsa-tooling)
+[](https://slack.openssf.org/)
[](https://slsa.dev)
@@ -90,15 +90,17 @@ You have two options to install the verifier.
#### Option 1: Install via go
If you want to install the verifier, you can run the following command:
+
```bash
$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.2.0
$ slsa-verifier
```
-Tools like [dependabot](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates) or [renovate](https://github.com/renovatebot/renovate) use your project's go.mod to identify the version of your Go dependencies.
+Tools like [dependabot](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates) or [renovate](https://github.com/renovatebot/renovate) use your project's go.mod to identify the version of your Go dependencies.
If you install the verifier binary in CI, we strongly recommend you create a placeholder `go.mod` containing slsa-verifier as a dependency to receive updates and keep the binary up-to-date. Use the following the steps:
1. Create a tooling/tooling_test.go file containing the following:
+
```go
//go:build tools
// +build tools
@@ -111,6 +113,7 @@ import (
```
1. Run the following commands in the tooling directory. (It will create a go.sum file.)
+
```bash
$ go mod init -tooling
$ go mod tidy
@@ -118,15 +121,18 @@ $ go mod tidy
1. Commit the tooling folder (containing the 3 files tooling_test.go, go.mod and go.sum) to the repository.
1. To install the verifier in your CI, run the following commands:
+
```bash
$ cd tooling
$ grep _ tooling_test.go | cut -f2 -d '"' | xargs -n1 -t go install
-```
+```
+
Alternatively, if your project does not rely on additional tools and only uses slsa-verifier, you can instead run the following commands:
+
```bash
$ cd tooling
$ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier
-```
+```
#### Option 2: Compile manually