hugo icon indicating copy to clipboard operation
hugo copied to clipboard

Please add SLSA provenance to your releases

Open udf2457 opened this issue 1 year ago • 5 comments
trafficstars

Please add SLSA provenance to your releases.

It is easy to do on on Github, for example:

https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#provenance-for-goreleaser https://goreleaser.com/blog/slsa-generation-for-your-artifacts/#slsa-github-generator

Background info: https://docs.sigstore.dev/signing/overview/

udf2457 avatar Apr 26 '24 17:04 udf2457