-
Notifications
You must be signed in to change notification settings - Fork 482
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
✨ SLSA provenance/build #1702
✨ SLSA provenance/build #1702
Conversation
7628b78
to
27cde69
Compare
Codecov Report
@@ Coverage Diff @@
## main #1702 +/- ##
=======================================
Coverage 51.08% 51.08%
=======================================
Files 87 87
Lines 7074 7074
=======================================
Hits 3614 3614
Misses 3220 3220
Partials 240 240 |
Integration tests success for |
Integration tests success for |
Integration tests success for |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is cool! Thanks for starting this.
Integration tests success for |
Stale pull request message |
@naveensrinivasan how can I make sure this PR is not taken into account by the stale issue bot? |
I removed the label. This should be good for now. There are additional labels that we can add to the PR to avoid stale bot from closing scorecard/.github/workflows/stale.yml Line 42 in d2e88f2
|
6fadf90
to
63143cc
Compare
Ready for review. |
Integration tests success for |
Integration tests success for |
Integration tests success for |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is cool! Thanks
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
YAY!
Integration tests success for |
Add support to generate SLSA provenance for our linux amd64 build.
We released the v1 of the generator and the verifier, which will announce via a blog post soon. In the meantime, let scorecard be the first to install it!