SLSA GitHub Generator download

This repository contains free tools to generate and verify SLSA Build Level 3 provenance for native GitHub projects using GitHub Actions. Developers can build their software using a secure process that protects against many supply chain attacks and tampering. Users of their software can verify a tamper-proof statement of the process to know how the software was created.

Features

Provenance is information, or metadata, about how a software artifact was created
Documentation available
Examples available
Generate provenance
Easy to use
Verify provenance
Build Your Own Builder

Project Samples

Project Activity

See All Activity >

License

Apache License V2.0

Follow SLSA GitHub Generator

SLSA GitHub Generator Web Site

Other Useful Business Software

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Rate This Project

User Reviews

Be the first to post a review of SLSA GitHub Generator!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

Related Categories

Go Security Software

Registered

2024-10-23

Similar Business Software

GitHub Advanced Security for Azure DevOps

GitHub Advanced Security for Azure DevOps is an application security testing service that is native to the developer workflow. It empowers Developer, Security, and Operations (DevSecOps) teams to prioritize innovation and enhance developer security without sacrificing productivity. Detect and...

See Software
StepSecurity

If you are using GitHub Actions for CI/CD and are worried about the security of CI/CD pipelines, StepSecurity platform is for you. Implement network egress control and CI/CD infrastructure security for GitHub Actions runners. Discover CI/CD risks and GitHub Actions security misconfiguration....

See Software
Acviss

Acviss is a leading brand protection and anti-counterfeiting company safeguarding over 400 million products and 80+ brands globally. Acviss safeguards your supply chain against fake and fraudulent products across online and offline channels! The end-to-end system offers a unique approach to...

See Software
Constellation

Constellation is a CNCF-certified Kubernetes distribution that leverages confidential computing to encrypt and isolate entire clusters, protecting data at rest, in transit, and during processing, by running control and worker planes within hardware-enforced trusted execution environments. It...

See Software
BeEF

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture...

See Software
Ettercap

Ettercap is a comprehensive suite for man-in-the-middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. The...

See Software

Report inappropriate content

SLSA GitHub Generator

Language-agnostic SLSA provenance generation for Github Actions

Get an email when there's a new version of SLSA GitHub Generator