Skip to content

Add SLSA generic generator workflow - #855

Open
hilljessica8787-dot wants to merge 1 commit into
bnb-chain:mainfrom
hilljessica8787-dot:main
Open

Add SLSA generic generator workflow#855
hilljessica8787-dot wants to merge 1 commit into
bnb-chain:mainfrom
hilljessica8787-dot:main

Conversation

@hilljessica8787-dot

Copy link
Copy Markdown

No description provided.

@hashdit-bot

hashdit-bot Bot commented Jul 15, 2026

Copy link
Copy Markdown

Pull Request Review

This PR adds a new GitHub Actions workflow (generator-generic-ossf-slsa3-publish.yml) to generate and publish SLSA v3 provenance for release artifacts. It introduces a two-job pipeline: a build job that creates sample artifacts and computes base64-encoded SHA-256 subjects, and a provenance job that invokes the slsa-framework/slsa-github-generator reusable workflow (v1.4.0) with OIDC token permissions. The workflow is triggered on manual dispatch and release creation events.

Sensitive Content

No sensitive content detected.

Security Issues

No serious security issues detected.


Generated by Hashdit Bot. This tool can absolutely NOT replace manual audits.

@tahermohamedali21-byte

Copy link
Copy Markdown

Hi

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants