slsa-github-generator icon indicating copy to clipboard operation
slsa-github-generator copied to clipboard

Published 20 hours ago • verified publisher icon slsa-framework

[feature][slsa-v1.0] Update PROVENANCE_FORMAT.md

Open ianlewis opened this issue 2 years ago • 3 comments

Now that most BYOB builders will build SLSA v1.0 we should probably update the PROVENANCE_FORMAT.md doc to reflect generation of v1.0 provenance.

ianlewis avatar Aug 09 '23 03:08 ianlewis

Related to updating to the Provenance v1, it would be great to get your feedback on Standardize externalParameters for CI/CD builds (slsa-framework/slsa#940).

joshuagl avatar Aug 09 '23 08:08 joshuagl

Related to updating to the Provenance v1, it would be great to get your feedback on Standardize externalParameters for CI/CD builds (slsa-framework/slsa#940).

Thanks for the invite. Commented on the issue.

ianlewis avatar Aug 10 '23 00:08 ianlewis

PROVENANCE_FORMAT.md seems to describe the format for our older workflows like the Go builder, generic generator, etc. Maybe we should just merge this into the BYOB.md doc? or into each builder's doc?

ianlewis avatar Aug 10 '23 01:08 ianlewis