SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier
📰 Dev.to · kt
After SBOM and Cosign comes Provenance. Issue SLSA Build L3 provenance with slsa-github-generator and verify it with slsa-verifier, end to end on real machines.
DeepCamp AI