A proof-of-concept for how the SLSA Source Track could be implemented.

Stores the GitHub Actions used by the SLSA Source Tool

Supply-chain Levels for Software Artifacts

Reference implementation for the SLSA Attested Build Environments track

SLSA Azure DevOps Pipelines Extension

Language-agnostic SLSA provenance generation for Github Actions

Verify provenance from SLSA compliant builders

Stores policies used by the SLSA Source Tool