Skip to content

@slsa-framework SLSA Framework

All

    Repositories list

    30 repositories

    • slsa

      Public
      Supply-chain Levels for Software Artifacts
      securitydevopssupply-chain-security
      securitydevopssupply-chain-security
      HTML
      •
      Other
      •294•1.9k•170•4•Updated Oct 6, 2026Oct 6, 2026

    • source-tool

      Public
      A proof-of-concept for how the SLSA Source Track could be implemented.
      Go
      •
      Apache License 2.0
      •19•18•29•4•Updated Oct 6, 2026Oct 6, 2026

    • actions

      Public
      Stores the GitHub Actions used by the SLSA Source Tool
      Shell
      •
      Apache License 2.0
      •4•4•0•1•Updated Oct 4, 2026Oct 4, 2026

    • attester

      Public
      SLSA attester and attestation library
      Go
      •
      Apache License 2.0
      •0•1•0•0•Updated Oct 4, 2026Oct 4, 2026

    • verifier

      Public
      SLSA Verifier
      Go
      •
      Apache License 2.0
      •3•1•0•0•Updated Oct 4, 2026Oct 4, 2026

    • oss-na24-slsa-workshop-model-integrity

      Public
      Python
      •
      Apache License 2.0
      •2•4•1•7•Updated Oct 3, 2026Oct 3, 2026

    • protos

      Public
      Protocol buffer definitions for the SLSA attestation predicates
      Go
      •
      Apache License 2.0
      •1•0•0•1•Updated Sep 28, 2026Sep 28, 2026

    • source-actions

      Public
      Source tool actions (fallback)
      Apache License 2.0
      •0•0•0•1•Updated Sep 18, 2026Sep 18, 2026

    • attested-build-environments-demo

      Public
      Reference implementation for the SLSA Attested Build Environments track
      Go
      •
      MIT License
      •4•8•1•6•Updated Aug 17, 2026Aug 17, 2026

    • governance

      Public
      SLSA implementation of Community Specification governance
      34•29•10•0•Updated Aug 11, 2026Aug 11, 2026

    • slsa-verifier

      Public
      Verify provenance from SLSA compliant builders
      Go
      •
      Apache License 2.0
      •74•346•118•24•Updated Aug 7, 2026Aug 7, 2026

    • slsa-github-generator

      Public
      Language-agnostic SLSA provenance generation for Github Actions
      securitysecurity-hardeningsecurity-tools
      securitysecurity-hardeningsecurity-toolsslsaslsaprovenance
      Go
      •
      Apache License 2.0
      •192•602•261•37•Updated Aug 7, 2026Aug 7, 2026

    • example-package

      Public archive
      TypeScript
      •
      Apache License 2.0
      •24•22•38•0•Updated Jul 1, 2026Jul 1, 2026

    • source-policies

      Public
      Stores policies used by the SLSA Source Tool
      Apache License 2.0
      •9•4•0•0•Updated Jun 5, 2026Jun 5, 2026

    • azure-devops-demo

      Public
      SLSA Azure DevOps Pipelines Extension
      TypeScript
      •
      Apache License 2.0
      •14•30•7•9•Updated Apr 7, 2026Apr 7, 2026

    • gcb-buildtypes

      Public
      Community-maintained SLSA buildType for Google Cloud Build (GCB)
      Apache License 2.0
      •6•5•0•0•Updated Nov 25, 2025Nov 25, 2025

    • example-trw

      Public archive
      Shell
      •
      Apache License 2.0
      •3•1•0•1•Updated Feb 24, 2025Feb 24, 2025

    • SLSA-workshop-Japan

      Public
      3•3•0•0•Updated Oct 10, 2024Oct 10, 2024

    • slsa-actions-template

      Public
      Create a SLSA builder reusable workflow using your tool.
      TypeScript
      •
      Apache License 2.0
      •6•8•8•12•Updated Aug 13, 2024Aug 13, 2024

    • slsa-jenkins-generator

      Public
      A proof-of-concept SLSA provenance generator for Jenkins
      Java
      •
      MIT License
      •6•25•3•6•Updated Jul 29, 2024Jul 29, 2024

    • slsa-policy

      Public
      Go
      •
      Apache License 2.0
      •4•4•14•0•Updated May 10, 2024May 10, 2024

    • oss-na24-slsa-workshop-organization

      Public
      Apache License 2.0
      •59•2•0•0•Updated May 10, 2024May 10, 2024

    • oss-na24-slsa-workshop

      Public
      Apache License 2.0
      •8•13•5•0•Updated Apr 15, 2024Apr 15, 2024

    • oss-na24-slsa-workshop-project1

      Public
      Go
      •
      Apache License 2.0
      •67•3•0•0•Updated Apr 3, 2024Apr 3, 2024

    • slsa-proposals

      Public
      SLSA Proposals
      10•13•0•0•Updated Jan 29, 2024Jan 29, 2024

    • provenance-architecture-demo

      Public
      Go
      •
      Apache License 2.0
      •5•10•1•0•Updated Dec 15, 2023Dec 15, 2023

    • github-actions-buildtypes

      Public
      Community-maintained SLSA buildType for GitHub Actions
      Apache License 2.0
      •6•12•2•0•Updated Jul 12, 2023Jul 12, 2023

    • npm-cli

      Public
      A temporary fork of the npm cli for slsa-github-generator
      JavaScript
      •
      Other
      •4.8k•1•0•0•Updated May 1, 2023May 1, 2023

    • github-actions-demo

      Public archive
      Proof-of-concept SLSA provenance generator for GitHub Actions
      Go
      •
      MIT License
      •23•100•6•3•Updated Nov 1, 2022Nov 1, 2022

    • slsa-github-generator-go

      Public
      19•58•0•2•Updated Jun 1, 2022Jun 1, 2022
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.