Repositories list

• example-package

  Public
  TypeScript

  •

  Apache License 2.0

  •26•20•38•0•Updated Jul 31, 2025Jul 31, 2025

• slsa-source-poc

  Public
  A proof-of-concept for how the SLSA Source Track could be implemented.

  Go

  •

  Apache License 2.0

  •10•8•18•1•Updated Jul 30, 2025Jul 30, 2025

• source-actions

  Public
  Stores the GitHub Actions used by the SLSA Source Tool

  Apache License 2.0

  •2•0•0•1•Updated Jul 30, 2025Jul 30, 2025

• slsa

  Public
  Supply-chain Levels for Software Artifacts

  devopssupply-chain-securitysecurity

  Shell

  •

  Other

  •247•1.7k•217•8•Updated Jul 29, 2025Jul 29, 2025

• source-policies

  Public
  Stores policies used by the SLSA Source Tool

  Apache License 2.0

  •2•0•0•0•Updated Jul 28, 2025Jul 28, 2025

• oss-na24-slsa-workshop-model-integrity

  Public
  Python

  •

  Apache License 2.0

  •2•1•1•0•Updated Jul 27, 2025Jul 27, 2025

• slsa-verifier

  Public
  Verify provenance from SLSA compliant builders

  Go

  •

  Apache License 2.0

  •56•275•113•11•Updated Jul 27, 2025Jul 27, 2025

• slsa-github-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  securitysecurity-hardeningsecurity-tools+ 2slsaslsaprovenance

  Go

  •

  Apache License 2.0

  •154•490•245•23•Updated Jun 27, 2025Jun 27, 2025

• attested-build-environments-demo

  Public
  Reference implementation for the SLSA Attested Build Environments track

  Go

  •

  MIT License

  •2•7•1•1•Updated Jun 17, 2025Jun 17, 2025

• governance

  Public
  SLSA implementation of Community Specification governance

  27•21•9•0•Updated Apr 28, 2025Apr 28, 2025

• example-trw

  Public
  Shell

  •

  Apache License 2.0

  •2•1•0•1•Updated Feb 24, 2025Feb 24, 2025

• SLSA-workshop-Japan

  Public
  3•3•0•0•Updated Oct 10, 2024Oct 10, 2024

• azure-devops-demo

  Public
  SLSA Azure DevOps Pipelines Extension

  TypeScript

  •

  Apache License 2.0

  •14•30•7•10•Updated Aug 14, 2024Aug 14, 2024

• slsa-actions-template

  Public
  Create a SLSA builder reusable workflow using your tool.

  TypeScript

  •

  Apache License 2.0

  •7•8•8•8•Updated Aug 13, 2024Aug 13, 2024

• slsa-jenkins-generator

  Public
  A proof-of-concept SLSA provenance generator for Jenkins

  Java

  •

  MIT License

  •6•24•3•6•Updated Jul 29, 2024Jul 29, 2024

• slsa-policy

  Public
  Go

  •

  Apache License 2.0

  •4•4•14•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop-organization

  Public
  Apache License 2.0

  •32•1•0•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop

  Public
  Apache License 2.0

  •7•10•5•0•Updated Apr 15, 2024Apr 15, 2024

• oss-na24-slsa-workshop-project1

  Public
  Go

  •

  Apache License 2.0

  •39•1•0•1•Updated Apr 3, 2024Apr 3, 2024

• slsa-proposals

  Public
  SLSA Proposals

  10•10•0•0•Updated Jan 29, 2024Jan 29, 2024

• provenance-architecture-demo

  Public
  Go

  •

  Apache License 2.0

  •5•10•1•1•Updated Dec 15, 2023Dec 15, 2023

• github-actions-buildtypes

  Public
  Community-maintained SLSA buildType for GitHub Actions

  Apache License 2.0

  •5•11•2•0•Updated Jul 12, 2023Jul 12, 2023

• npm-cli

  Public
  A temporary fork of the npm cli for slsa-github-generator

  JavaScript

  •

  Other

  •3.5k•1•0•0•Updated May 1, 2023May 1, 2023

• gcb-buildtypes

  Public
  Community-maintained SLSA buildType for Google Cloud Build (GCB)

  Apache License 2.0

  •4•4•0•0•Updated Apr 12, 2023Apr 12, 2023

• github-actions-demo

  Public archive
  Proof-of-concept SLSA provenance generator for GitHub Actions

  Go

  •

  MIT License

  •23•100•6•3•Updated Nov 1, 2022Nov 1, 2022

• slsa-github-generator-go

  Public
  19•57•0•2•Updated Jun 1, 2022Jun 1, 2022