Repositories list

• example-package

  Public
  TypeScript

  •

  Apache License 2.0

  •25•21•38•2•Updated Jan 7, 2026Jan 7, 2026

• slsa

  Public
  Supply-chain Levels for Software Artifacts

  securitydevopssupply-chain-security

  Shell

  •

  Other

  •274•1.8k•220•12•Updated Dec 30, 2025Dec 30, 2025

• attested-build-environments-demo

  Public
  Reference implementation for the SLSA Attested Build Environments track

  Go

  •

  MIT License

  •3•8•1•1•Updated Dec 23, 2025Dec 23, 2025

• source-tool

  Public
  A proof-of-concept for how the SLSA Source Track could be implemented.

  Go

  •

  Apache License 2.0

  •13•16•25•1•Updated Dec 22, 2025Dec 22, 2025

• gcb-buildtypes

  Public
  Community-maintained SLSA buildType for Google Cloud Build (GCB)

  Apache License 2.0

  •5•4•0•0•Updated Nov 25, 2025Nov 25, 2025

• oss-na24-slsa-workshop-model-integrity

  Public
  Python

  •

  Apache License 2.0

  •3•2•1•2•Updated Nov 25, 2025Nov 25, 2025

• slsa-verifier

  Public
  Verify provenance from SLSA compliant builders

  Go

  •

  Apache License 2.0

  •60•301•114•17•Updated Nov 20, 2025Nov 20, 2025

• source-policies

  Public
  Stores policies used by the SLSA Source Tool

  Apache License 2.0

  •7•3•0•5•Updated Oct 28, 2025Oct 28, 2025

• slsa-github-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  securitysecurity-hardeningsecurity-tools+ 2slsaslsaprovenance

  Go

  •

  Apache License 2.0

  •171•533•251•28•Updated Oct 20, 2025Oct 20, 2025

• source-actions

  Public
  Stores the GitHub Actions used by the SLSA Source Tool

  Apache License 2.0

  •4•1•1•2•Updated Aug 6, 2025Aug 6, 2025

• governance

  Public
  SLSA implementation of Community Specification governance

  30•23•10•0•Updated Apr 28, 2025Apr 28, 2025

• example-trw

  Public
  Shell

  •

  Apache License 2.0

  •2•1•0•1•Updated Feb 24, 2025Feb 24, 2025

• SLSA-workshop-Japan

  Public
  3•3•0•0•Updated Oct 10, 2024Oct 10, 2024

• azure-devops-demo

  Public
  SLSA Azure DevOps Pipelines Extension

  TypeScript

  •

  Apache License 2.0

  •14•29•7•10•Updated Aug 14, 2024Aug 14, 2024

• slsa-actions-template

  Public
  Create a SLSA builder reusable workflow using your tool.

  TypeScript

  •

  Apache License 2.0

  •7•8•8•9•Updated Aug 13, 2024Aug 13, 2024

• slsa-jenkins-generator

  Public
  A proof-of-concept SLSA provenance generator for Jenkins

  Java

  •

  MIT License

  •6•24•3•6•Updated Jul 29, 2024Jul 29, 2024

• slsa-policy

  Public
  Go

  •

  Apache License 2.0

  •4•4•14•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop-organization

  Public
  Apache License 2.0

  •61•1•0•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop

  Public
  Apache License 2.0

  •9•12•5•0•Updated Apr 15, 2024Apr 15, 2024

• oss-na24-slsa-workshop-project1

  Public
  Go

  •

  Apache License 2.0

  •69•1•0•1•Updated Apr 3, 2024Apr 3, 2024

• slsa-proposals

  Public
  SLSA Proposals

  11•11•0•0•Updated Jan 29, 2024Jan 29, 2024

• provenance-architecture-demo

  Public
  Go

  •

  Apache License 2.0

  •5•10•1•1•Updated Dec 15, 2023Dec 15, 2023

• github-actions-buildtypes

  Public
  Community-maintained SLSA buildType for GitHub Actions

  Apache License 2.0

  •6•11•2•0•Updated Jul 12, 2023Jul 12, 2023

• npm-cli

  Public
  A temporary fork of the npm cli for slsa-github-generator

  JavaScript

  •

  Other

  •4k•1•0•0•Updated May 1, 2023May 1, 2023

• github-actions-demo

  Public archive
  Proof-of-concept SLSA provenance generator for GitHub Actions

  Go

  •

  MIT License

  •23•100•6•3•Updated Nov 1, 2022Nov 1, 2022

• slsa-github-generator-go

  Public
  19•58•0•2•Updated Jun 1, 2022Jun 1, 2022