slsa-framework/slsa-github-generator
View on GitHub ↗ ★ 609 Go
Language-agnostic SLSA provenance generation for Github Actions
5 mentions on Hacker News by 3 people: 1 story, 4 comments · first 2023-11-14 · latest 2024-10-23
20082026
-
…scope for, and unrelated to, this particular sub-project. > slsa-framework/slsa-github-generator: https://github.com/slsa-framework/slsa-github-generator says: > This repository contains free tools to generate and verify SLSA Build Level 3…
comment by sgbeal · 2024-10-23 · in Migration of the build system to autosetup -
…packages with sigstore.dev's Cosign to Rekor, too IIUC. slsa-framework/slsa-github-generator: https://github.com/slsa-framework/slsa-github-generator
comment by westurner · 2024-10-23 · in Migration of the build system to autosetup -
…the latest wave of dependency security best practices guaranteed this would happen eventually. [0]: https://github.com/slsa-framework/slsa-github-generator/issu...
comment by sgammon · 2024-03-20 · in SLSA up to v1.9.0 (latest) breaking GHA pipelines -
…chain workflow. slsa-framework/slsa-github-generator > Generate [signed] provenance metadata : https://github.com/slsa-framework/slsa-github-generator#gene... : > Supply chain Levels for Software Artifacts, or SLSA (salsa), is a security…
comment by westurner · 2023-11-14 · in Firmware Software Bill of Materials (SBoM) Proposal