Repositories list

• example-package

  Public
  TypeScript

  •

  Apache License 2.0

  •25•21•38•4•Updated Dec 17, 2025Dec 17, 2025

• source-tool

  Public
  A proof-of-concept for how the SLSA Source Track could be implemented.

  Go

  •

  Apache License 2.0

  •13•16•25•1•Updated Dec 16, 2025Dec 16, 2025

• attested-build-environments-demo

  Public

  slsa-framework/attested-build-environments-demo’s past year of commit activity
  Reference implementation for the SLSA Attested Build Environments track

  Go

  •

  MIT License

  •3•8•1•3•Updated Dec 15, 2025Dec 15, 2025

• slsa

  Public
  Supply-chain Levels for Software Artifacts

  securitydevopssupply-chain-security

  Shell

  •

  Other

  •272•1.8k•218•7•Updated Dec 15, 2025Dec 15, 2025

• gcb-buildtypes

  Public

  slsa-framework/gcb-buildtypes’s past year of commit activity
  Community-maintained SLSA buildType for Google Cloud Build (GCB)

  Apache License 2.0

  •5•4•0•0•Updated Nov 25, 2025Nov 25, 2025

• oss-na24-slsa-workshop-model-integrity

  Public
  Python

  •

  Apache License 2.0

  •3•2•1•2•Updated Nov 25, 2025Nov 25, 2025

• slsa-verifier

  Public
  Verify provenance from SLSA compliant builders

  Go

  •

  Apache License 2.0

  •59•300•114•17•Updated Nov 20, 2025Nov 20, 2025

• source-policies

  Public
  Stores policies used by the SLSA Source Tool

  Apache License 2.0

  •7•3•0•5•Updated Oct 28, 2025Oct 28, 2025

• slsa-github-generator

  Public

  slsa-framework/slsa-github-generator’s past year of commit activity
  Language-agnostic SLSA provenance generation for Github Actions

  securitysecurity-hardeningsecurity-tools+ 2slsaslsaprovenance

  Go

  •

  Apache License 2.0

  •171•530•251•29•Updated Oct 20, 2025Oct 20, 2025

• source-actions

  Public
  Stores the GitHub Actions used by the SLSA Source Tool

  Apache License 2.0

  •4•1•1•2•Updated Aug 6, 2025Aug 6, 2025

• governance

  Public
  SLSA implementation of Community Specification governance

  30•24•10•0•Updated Apr 28, 2025Apr 28, 2025

• example-trw

  Public
  Shell

  •

  Apache License 2.0

  •2•1•0•1•Updated Feb 24, 2025Feb 24, 2025

• SLSA-workshop-Japan

  Public
  3•3•0•0•Updated Oct 10, 2024Oct 10, 2024

• azure-devops-demo

  Public
  SLSA Azure DevOps Pipelines Extension

  TypeScript

  •

  Apache License 2.0

  •14•29•7•10•Updated Aug 14, 2024Aug 14, 2024

• slsa-actions-template

  Public
  Create a SLSA builder reusable workflow using your tool.

  TypeScript

  •

  Apache License 2.0

  •7•8•8•9•Updated Aug 13, 2024Aug 13, 2024

• slsa-jenkins-generator

  Public
  A proof-of-concept SLSA provenance generator for Jenkins

  Java

  •

  MIT License

  •6•24•3•6•Updated Jul 29, 2024Jul 29, 2024

• slsa-policy

  Public
  Go

  •

  Apache License 2.0

  •4•4•14•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop-organization

  Public
  Apache License 2.0

  •61•1•0•1•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop

  Public
  Apache License 2.0

  •9•12•5•0•Updated Apr 15, 2024Apr 15, 2024

• oss-na24-slsa-workshop-project1

  Public
  Go

  •

  Apache License 2.0

  •69•1•0•1•Updated Apr 3, 2024Apr 3, 2024

• slsa-proposals

  Public
  SLSA Proposals

  11•11•0•0•Updated Jan 29, 2024Jan 29, 2024

• provenance-architecture-demo

  Public
  Go

  •

  Apache License 2.0

  •5•10•1•1•Updated Dec 15, 2023Dec 15, 2023

• github-actions-buildtypes

  Public
  Community-maintained SLSA buildType for GitHub Actions

  Apache License 2.0

  •6•11•2•0•Updated Jul 12, 2023Jul 12, 2023

• npm-cli

  Public
  A temporary fork of the npm cli for slsa-github-generator

  JavaScript

  •

  Other

  •4k•1•0•0•Updated May 1, 2023May 1, 2023

• github-actions-demo

  Public archive
  Proof-of-concept SLSA provenance generator for GitHub Actions

  Go

  •

  MIT License

  •23•100•6•3•Updated Nov 1, 2022Nov 1, 2022

• slsa-github-generator-go

  Public
  19•58•0•2•Updated Jun 1, 2022Jun 1, 2022