slsa-framework / slsa-verifier
Verify provenance from SLSA compliant builders
☆229Updated last week
Related projects ⓘ
Alternatives and complementary repositories for slsa-verifier
- Language-agnostic SLSA provenance generation for Github Actions☆430Updated this week
- in-toto Attestation Framework☆239Updated this week
- ☆227Updated last week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆70Updated this week
- A tool to create, transform and attest VEX metadata☆116Updated this week
- Proof-of-concept SLSA provenance generator for GitHub Actions☆99Updated 2 years ago
- OpenVEX Specification☆130Updated 3 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…