Artem A.

This is the huge issue for us. It fails the scans.

signed cla

@jonathanmetzman no worries - if it's messing up with the existing workflows

+1 on this issue! It is currently completely undocumented, and blocks us from enabling APM tracing.

I can help with this one too @sergiomarotco

GitHub is great, but for many folks their CI systems are different. It would be nice to have a common library that can interface with these systems. For example, generating...

@joshuagl @MarkLodato Got it! So, maybe we should improve docs to mention those libraries(especially in-toto-golang) /projects? I think it would be helpful for people starting with SLSA to have a...

Is it ever going to be merged? Are there other known tools to generate provenance?

i assume there are no plans on getting this work merged?

Any updates on this issue? Looks like it is a WIP, but would be curious to know the current progress.