slsa-provenance-toolchain-integration
OfficialEnd-to-end build provenance across toolchains.
Authoradaptive-enforcement-lab
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Manual, multi-language build provenance is error-prone and hard to scale without consistent attestation.
Core Features & Use Cases
- Multi-artifact provenance: Generate and attach provenance for binaries, packages, wheels, and container images across Go, Node.js, and Python.
- Container image attestation: Attach attestations to container images and ensure reproducible builds.
- Dependency verification: Validate lockfiles (go.sum, package-lock.json, poetry.lock) as part of the pipeline.
- Verification workflows: Integrate with slsa-verifier to gate deployments based on provenance.
Quick Start
Configure your CI/CD to generate SLSA provenance for Go, Node.js, and Python artifacts using the provided workflow templates and verification steps.
Dependency Matrix
Required Modules
None requiredComponents
scripts
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: slsa-provenance-toolchain-integration Download link: https://github.com/adaptive-enforcement-lab/claude-skills/archive/main.zip#slsa-provenance-toolchain-integration Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.