slsa-github-generator icon indicating copy to clipboard operation
slsa-github-generator copied to clipboard

Published 20 hours ago • verified publisher icon slsa-framework

[feature] Re-visit generator's source reporting

Open laurentsimon opened this issue 2 years ago • 1 comments
trafficstars

We currently use externalParameters.workflow for generators. There is WIP to better define how to report this, and maybe have it under resolvedDependencies with annotations.

laurentsimon avatar Jun 01 '23 17:06 laurentsimon

related to https://github.com/slsa-framework/github-actions-buildtypes/issues/4

ianlewis avatar Jun 02 '23 05:06 ianlewis