developer-guy / slsa-workflow-examples

Showcasing some example workflows to apply SLSA principles

SLSA workflow examples

In this repository you can find some examples on how to secure your software supply chain by implementing SLSA requirements.

To do so I make use of the following tools:

• GitHub action
• Sigstore
• Syft
• in-toto
• SLSA Provenance
• SLSA requirements
• SLSA Provenance Action

See the workflows on how to utilize these tools to secure your own software supply chains.

Go App

To compile the Go app you can simply run the following command.

go build -o bin/slsa-workflow-example .

Or simply build the Docker image.

docker build -t ghcr.io/marcofranssen/slsa-workflow-example .