#

slsa-verifier

Here are 2 public repositories matching this topic...

cbrkrtek / slsa-provenance-lab

Cryptographic proof of how an artifact was built, not just that it wasn't tampered with. Hands-on lab comparing Cosign signing vs SLSA Level 3 provenance using GitHub Actions, slsa-github-generator and slsa-verifier — including a forged-provenance attack demo.

provenance devsecops container-security sbom github-actions slsa supply-chain-security ghcr cosign sigstore software-supply-chain-security ci-cd-security slsa-verifier

Updated Sep 9, 2026
Shell

0-draft / hello-slsa

Minimal end-to-end demo of SLSA Build L3 provenance: a 12-line Go binary that signs its own provenance on every tag, plus a verifier walkthrough.

golang security provenance attestation hands-on github-actions in-toto slsa supply-chain-security sigstore dsse slsa-verifier slsa-github-generator slsa-level-3

Updated Apr 29, 2026
Shell

Add this topic to your repo

To associate your repository with the slsa-verifier topic, visit your repo's landing page and select "manage topics."