This repository contains free tools to generate and verify SLSA Build Level 3 provenance for native GitHub projects using GitHub Actions. Developers can build their software using a secure process that protects against many supply chain attacks and tampering. Users of their software can verify a tamper-proof statement of the process to know how the software was created.

Features

  • Provenance is information, or metadata, about how a software artifact was created
  • Documentation available
  • Examples available
  • Generate provenance
  • Easy to use
  • Verify provenance
  • Build Your Own Builder

Project Samples

SLSA GitHub Generator Screenshot 1

Project Activity

See All Activity >

Categories

Security

License

Apache License V2.0

Follow SLSA GitHub Generator

SLSA GitHub Generator Web Site

Other Useful Business Software
$300 Free Credits to Build on Google Cloud Icon
$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Start Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of SLSA GitHub Generator!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

Go

Related Categories

Go Security Software

Registered

2024-10-23
Report inappropriate content