OpenSSF publication

SLSA Provenance

Cryptographically attested record of how a software artifact was built, including the build platform identity, source revision, build parameters, and the resulting artifact digest.

Read the publication

Relationships

Incoming

consumed byGUAC
produced byslsa-github-generator
consumed byslsa-verifier
produced bySLSApublication
Conforming SLSA build-track implementations emit signed SLSA Provenance for every artefact they produce.