New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add SLSA provenance #634

Open

udf2457 opened this issue Apr 24, 2024 · 1 comment

Contributor

udf2457 commented Apr 24, 2024

Please add SLSA provenance to your releases.

It is quick and easy to do on on Github:

https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#provenance-for-goreleaser
https://goreleaser.com/blog/slsa-generation-for-your-artifacts/#slsa-github-generator

Background info:
https://docs.sigstore.dev/signing/overview/

kommendorkapten assigned kommendorkapten and unassigned kommendorkapten

Member

kommendorkapten commented May 7, 2024

With the new Artifact Attestation support from GitHub this should be fairly trivial to add. I can take a look on this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment