-
Notifications
You must be signed in to change notification settings - Fork 144
-
BYOB framework pre-release
No due date Last updated 3 months agoA framework to bring / build your own builder, allowing existing tools / GitHub Actions to be safely wrapped into a SLSA level 3 reusable workflow.
-
Docker image based builds for arbitrary binaries
No due date Last updated 10 months agoAdd the ability to execute builds by running a Docker image and gen…
Add the ability to execute builds by running a Docker image and generate provenance for the build.
This will add a new container workflow which will allow projects to build artifacts using a docker image and generate provenance for SLSA Level 3.
-
Maven package builder GA
No due date Last updated 10 months agoA builder to build and publish packages to Maven central, using the BYOB framework
-
Bazel builder GA
No due date Last updated 10 months agoA SLSA compliant builder for https://bazel.build/ projects, using v1.0 specs
-
BYOB framework GA
No due date Last updated 10 months ago -
Support for SLSA v1.0
No due date Last updated 10 months agoThis milestone tracks support for SLSA v1.0
-
Node.js builder GA
No due date Last updated 10 months agoThis milestone will add a new reusable workflow to build and publis…
This milestone will add a new reusable workflow to build and publish Node.js npm packages with that means the provenance requirements
for SLSA Level 3 by simply adding a new job to their existing GitHub Actions workflow.This will serve as the "Trusted Builder" for npm RFC-0049.
-
Next release
No due date Last updated 11 months agoMilestone for next release. Not particular features, mostly updates, fixes and improvements
-
Dockerfile builder
No due date Last updated over 1 year agoA new reusable workflow will be developed (likely in another reposi…
A new reusable workflow will be developed (likely in another repository) to build Docker images from a Dockerfile.
This will add a new Dockerfile builder workflow which will allow OSS projects to generate provenance for their Docker images that satisfies the provenance requirements for SLSA Level 3.
This workflow will use the BYOB framework.