Language-agnostic SLSA provenance generation for Github Actions
-
Updated
May 11, 2024 - Go
#
slsaprovenance
Here are 4 public repositories matching this topic...
Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
docker
security
security-audit
containers
container
provenance
oci
oci-image
vulnerability
vulnerabilities
cve
vulnerability-management
vulnerability-assessment
containerization
security-tools
container-image
oras
slsa
slsaprovenance
-
Updated
Oct 30, 2023 - Go
An opinionated Python package/application template repository, with SLSA and SBOM support built in, enabled for security scanners, code linters, typing, testing and code coverage monitoring, and release automation for reproducible builds.
python
release-automation
python-package
reproducible-builds
security-automation
conventional-commits
secure-by-design
sbom
template-repository
slsa
slsaprovenance
-
Updated
Apr 22, 2024 - Makefile
A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance
-
Updated
Feb 10, 2022 - Go
Improve this page
Add a description, image, and links to the slsaprovenance topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the slsaprovenance topic, visit your repo's landing page and select "manage topics."