build-provenance

Here are 3 public repositories matching this topic...

GitHub Actions and GitLab CI integration for cilock — wrap any command or downstream action and emit a signed in-toto attestation.

gitlab-ci ci-cd attestation devsecops github-actions in-toto slsa supply-chain-security sigstore dsse build-provenance

Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI.

golang supply-chain ci-cd compliance attestation witness sarif devsecops sbom in-toto slsa supply-chain-security sigstore dsse build-provenance

Add a description, image, and links to the build-provenance topic page so that developers can more easily learn about it.

To associate your repository with the build-provenance topic, visit your repo's landing page and select "manage topics."