A proof-of-concept for how the SLSA Source Track could be implemented.

Stores policies used by the SLSA Source Tool

Reference implementation for the SLSA Attested Build Environments track

Supply-chain Levels for Software Artifacts

Stores the GitHub Actions used by the SLSA Source Tool

Verify provenance from SLSA compliant builders

Language-agnostic SLSA provenance generation for Github Actions

SLSA implementation of Community Specification governance