slsa-verifier
slsa-verifier copied to clipboard
[feature] Support for gitCommit
https://github.com/slsa-framework/github-actions-buildtypes/blob/main/workflow/v1/example.json#L32
I don't know how to differentiate between sha1 and sha256. I suppose it's going to be length-based...?