-
Look into [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator)
-
We had a blog post before introducing how KubeEdge achieves SLSA compliance, including the introduction of SLSA compliance, how to verify it, etc.
But we still need to add the SLSA compliance requ…
-
Please consider adding [SLSA provenance](https://slsa.dev/) to your releases, e.g. via [GitHub Artifact attestations](https://github.blog/changelog/2024-06-25-artifact-attestations-is-generally-availa…
-
Hi,
I am planning to translate SLSA v1.0 documents into Chinese. Please let me know where should I put those files.
-
Customer is seeing that the Tekton Chains Controller regularly crashes with the following being printed:
```
{"level":"info","ts":"2024-08-21T06:34:10.053Z","logger":"watcher","caller":"controller/c…
-
**Description**
Re: https://github.com/slsa-framework/slsa-verifier/pull/791#discussion_r1693621800
I'm proposing that we change `NewLiveTrustedRoot` to accept an existing client, instead of…
-
related to: https://github.com/slsa-framework/slsa/pull/1097#discussion_r1718489268
## Level 2
my initial thoughts are that we're trying to get across the following concepts:
teams can have more th…
-
**Motivation**
We have signatures with cosign, and our next step is to add provenance attestations to images and artifacts as well, in the same way we have in Falcoctl
cc @cpanato @developer-guy
-
See https://github.com/cli/cli/pull/8698/ for required code changes
-
Please add [SLSA provenance ](https://slsa.dev/)to your releases.
It is quick and easy to do on on Github:
https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/gen…