A CLI tool that prefetches project dependencies for hermetic container builds.
Official Docker-maintained reusable GitHub Actions workflows to securely build container images
Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
Kettle builds and verifies attested builds, packages that include cryptographically signed SLSA provenance.
Example project using SLSA 3 Generic Generator with GoReleaser
Sign and package attestations in sigstore bundles
A Jenkins plugin to create SLSA provenance attestations
Generates SBOMs remotely in a verifiable manner (SLSA Build L3)
🛡️ Enterprise Polyglot DevSecOps Platform: End-to-End CI/CD, SAST (Semgrep), DAST (OWASP ZAP), SCA (Trivy), Secret Scanning, SLSA Provenance, Sigstore Cosign & K8s across Django, Spring Boot, Express, Next.js & Angular
Create SLSA Provenance from nix flake
Interactive Architecture Showcase & Open Contracts for Mohamed Osama AI Systems Platform
The In-Browser Self-Healing Web Runtime. Real-time 60 FPS DOM containment, W3C LoAF/INP diagnostics, and SLSA v1.0 provenance via Safe Rust WASM & WebMCP.
Zero-trust, SLSA-aligned reference architecture for compiling deterministic Python wheels with Sigstore attestations, OpenVEX, and hermetic build gates.
Buildkite plugin that generates a SLSA Provenance attestation for a build step
secure-by-default github template for oss: signed commits, sha-pinned actions, slsa v1.0 provenance, sigstore keyless signing, npm oidc publishing.
Jenkins Shared Library
🏛️ Multi-Vendor Commerce Platform & Affiliate Engine Interface Contracts & Simulation Suite
SLSA generate and verify provenance demo
Noir ZK circuits: cryptographic receipts proving SSCoP conformance without exposing vendor evidence
Ensignia Provenance Upload Action
To associate your repository with the slsa-provenance topic, visit your repo's landing page and select "manage topics."