slsa-github-generator
slsa-github-generator copied to clipboard
Externalize shell scripts
trafficstars
Related #53
We should consider moving the shell scripts to their own files rather than having them inline in yaml so that it's easier to lint them for problems. Shell code is just too prone to errors that are hard to catch in reviews.