README
Example project for SLSA
Example project builds a simple binary using a variety of SLSA-compliant builders.
The code is built using bazelisk build:
- Bazelisk reads .bazelversion, fetches the correct version of Bazel, and
then runs
bazel build. - Bazel reads WORKSPACE, fetches the rules_go module, and then compiles the
hellobinary.
For GitHub Actions-based builds, the artifact is uploaded using actions/upload-artifact.
Builders
- github-actions-demo.yaml (results): SLSA 1 provenance generated on GitHub Actions using https://github.com/slsa-framework/github-actions-demo.
- slsa-github-generator.yaml (results): SLSA 2 provenance generated on GitHub Actions using https://github.com/slsa-framework/slsa-github-generator.
slsa-github-generator e2e test status
Project health
Node.js builder e2e tests
| Event | Name | Status |
|---|---|---|
| create |  | |
| push | default branch |  |
| custom publish |  | |
| Node 16 |  | |
| Node 18 |  | |
| npm dist-tag |  | |
| non-default branch |  | |
| push to tag |  | |
| push to tag (unscoped package) |  | |
| release |  | |
| workflow_dispatch |  |
BYOB generic permissions builder e2e tests
| Event | Name | Status |
|---|---|---|
| create | default |  |
| with sha1 |  | |
| push | default branch |  |
| push to tag |  | |
| release | default |  |
| With sha1 |  | |
| workflow_dispatch | default branch |  |
| default branch w/ sha1 |  | |
| non-default branch |  | |
| non-default branch w/ sha1 |  |
BYOB low permissions builder e2e tests
| Event | Status |
|---|---|
| workflow_dispatch |  |
| release |  |
| create |  |
| push |  |
| tag |  |
Contributors
Similar repos
Languages
TypeScript
23.9%
Starlark
16.3%
Makefile
15.2%
Shell
14.6%
Python
13.7%
Go
10.5%
Java
3.5%
Dockerfile
2.4%
README
Example project for SLSA
Example project builds a simple binary using a variety of SLSA-compliant builders.
The code is built using bazelisk build:
- Bazelisk reads .bazelversion, fetches the correct version of Bazel, and
then runs
bazel build. - Bazel reads WORKSPACE, fetches the rules_go module, and then compiles the
hellobinary.
For GitHub Actions-based builds, the artifact is uploaded using actions/upload-artifact.
Builders
- github-actions-demo.yaml (results): SLSA 1 provenance generated on GitHub Actions using https://github.com/slsa-framework/github-actions-demo.
- slsa-github-generator.yaml (results): SLSA 2 provenance generated on GitHub Actions using https://github.com/slsa-framework/slsa-github-generator.
slsa-github-generator e2e test status
Project health
Node.js builder e2e tests
| Event | Name | Status |
|---|---|---|
| create | | |
| push | default branch | |
| custom publish | | |
| Node 16 | | |
| Node 18 | | |
| npm dist-tag | | |
| non-default branch | | |
| push to tag | | |
| push to tag (unscoped package) | | |
| release | | |
| workflow_dispatch | |
BYOB generic permissions builder e2e tests
| Event | Name | Status |
|---|---|---|
| create | default | |
| with sha1 | | |
| push | default branch | |
| push to tag | | |
| release | default | |
| With sha1 | | |
| workflow_dispatch | default branch | |
| default branch w/ sha1 | | |
| non-default branch | | |
| non-default branch w/ sha1 | |
BYOB low permissions builder e2e tests
| Event | Status |
|---|---|
| workflow_dispatch | |
| release | |
| create | |
| push | |
| tag | |
Similar repos
Contributors
Languages
TypeScript
23.9%
Starlark
16.3%
Makefile
15.2%
Shell
14.6%
Python
13.7%
Go
10.5%
Java
3.5%
Dockerfile
2.4%