Skip to content

Add SLSA generic generator workflow#2902

Open
samhiotisiddn-jpg wants to merge 1 commit into
github:mainfrom
samhiotisiddn-jpg:main
Open

Add SLSA generic generator workflow#2902
samhiotisiddn-jpg wants to merge 1 commit into
github:mainfrom
samhiotisiddn-jpg:main

Conversation

@samhiotisiddn-jpg

@samhiotisiddn-jpg samhiotisiddn-jpg commented Jul 18, 2026

Copy link
Copy Markdown

This workflow generates SLSA provenance files for projects, satisfying level 3 requirements. It includes steps for building artifacts and generating subjects for provenance.

Summary

Why

Fixes #

What changed

MCP impact

  • No tool or API changes
  • Tool schema or behavior changed
  • New tool added

Prompts tested (tool changes only)

Security / limits

  • No security or limits impact
  • Auth / permissions considered
  • Data exposure, filtering, or token/size limits considered

Tool renaming

  • I am renaming tools as part of this PR (e.g. a part of a consolidation effort)
    • I have added the new tool aliases in deprecated_tool_aliases.go
  • I am not renaming tools as part of this PR

Note: if you're renaming tools, you must add the tool aliases. For more information on how to do so, please refer to the official docs.

Lint & tests

  • Linted locally with ./script/lint
  • Tested locally with ./script/test

Docs

  • Not needed
  • Updated (README / docs / examples)

This workflow generates SLSA provenance files for projects, satisfying level 3 requirements. It includes steps for building artifacts and generating subjects for provenance.
@samhiotisiddn-jpg
samhiotisiddn-jpg requested a review from a team as a code owner July 18, 2026 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant