Repositories list

• example-package

  Public
  TypeScript

  •

  Apache License 2.0

  •26•20•38•0•Updated Sep 22, 2025Sep 22, 2025

• source-tool

  Public
  A proof-of-concept for how the SLSA Source Track could be implemented.

  Go

  •

  Apache License 2.0

  •11•8•27•1•Updated Sep 18, 2025Sep 18, 2025

• slsa

  Public
  Supply-chain Levels for Software Artifacts

  devopssupply-chain-securitysecurity

  Shell

  •

  Other

  •264•1.7k•217•6•Updated Sep 17, 2025Sep 17, 2025

• attested-build-environments-demo

  Public
  Reference implementation for the SLSA Attested Build Environments track

  Go

  •

  MIT License

  •3•7•1•0•Updated Sep 11, 2025Sep 11, 2025

• oss-na24-slsa-workshop-model-integrity

  Public
  Python

  •

  Apache License 2.0

  •2•1•1•0•Updated Sep 10, 2025Sep 10, 2025

• source-policies

  Public
  Stores policies used by the SLSA Source Tool

  Apache License 2.0

  •3•0•0•0•Updated Aug 24, 2025Aug 24, 2025

• source-actions

  Public
  Stores the GitHub Actions used by the SLSA Source Tool

  Apache License 2.0

  •2•0•0•0•Updated Aug 6, 2025Aug 6, 2025

• slsa-verifier

  Public
  Verify provenance from SLSA compliant builders

  Go

  •

  Apache License 2.0

  •57•284•113•13•Updated Jul 27, 2025Jul 27, 2025

• slsa-github-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  securitysecurity-hardeningsecurity-tools+ 2slsaslsaprovenance

  Go

  •

  Apache License 2.0

  •162•497•248•24•Updated Jun 27, 2025Jun 27, 2025

• governance

  Public
  SLSA implementation of Community Specification governance

  28•23•9•0•Updated Apr 28, 2025Apr 28, 2025

• example-trw

  Public
  Shell

  •

  Apache License 2.0

  •2•1•0•1•Updated Feb 24, 2025Feb 24, 2025

• SLSA-workshop-Japan

  Public
  3•3•0•0•Updated Oct 10, 2024Oct 10, 2024

• azure-devops-demo

  Public
  SLSA Azure DevOps Pipelines Extension

  TypeScript

  •

  Apache License 2.0

  •14•29•7•10•Updated Aug 14, 2024Aug 14, 2024

• slsa-actions-template

  Public
  Create a SLSA builder reusable workflow using your tool.

  TypeScript

  •

  Apache License 2.0

  •7•8•8•8•Updated Aug 13, 2024Aug 13, 2024

• slsa-jenkins-generator

  Public
  A proof-of-concept SLSA provenance generator for Jenkins

  Java

  •

  MIT License

  •7•23•3•6•Updated Jul 29, 2024Jul 29, 2024

• slsa-policy

  Public
  Go

  •

  Apache License 2.0

  •4•4•14•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop-organization

  Public
  Apache License 2.0

  •61•1•0•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop

  Public
  Apache License 2.0

  •9•12•5•0•Updated Apr 15, 2024Apr 15, 2024

• oss-na24-slsa-workshop-project1

  Public
  Go

  •

  Apache License 2.0

  •69•1•0•1•Updated Apr 3, 2024Apr 3, 2024

• slsa-proposals

  Public
  SLSA Proposals

  10•10•0•0•Updated Jan 29, 2024Jan 29, 2024

• provenance-architecture-demo

  Public
  Go

  •

  Apache License 2.0

  •5•10•1•1•Updated Dec 15, 2023Dec 15, 2023

• github-actions-buildtypes

  Public
  Community-maintained SLSA buildType for GitHub Actions

  Apache License 2.0

  •5•11•2•0•Updated Jul 12, 2023Jul 12, 2023

• npm-cli

  Public
  A temporary fork of the npm cli for slsa-github-generator

  JavaScript

  •

  Other

  •3.7k•1•0•0•Updated May 1, 2023May 1, 2023

• gcb-buildtypes

  Public
  Community-maintained SLSA buildType for Google Cloud Build (GCB)

  Apache License 2.0

  •4•4•0•0•Updated Apr 12, 2023Apr 12, 2023

• github-actions-demo

  Public archive
  Proof-of-concept SLSA provenance generator for GitHub Actions

  Go

  •

  MIT License

  •23•100•6•3•Updated Nov 1, 2022Nov 1, 2022

• slsa-github-generator-go

  Public
  19•57•0•2•Updated Jun 1, 2022Jun 1, 2022