Repositories list

• source-tool

  Public
  A proof-of-concept for how the SLSA Source Track could be implemented.

  Go

  •

  Apache License 2.0

  •1818 forks•1818 stars•3030 issues•44 pull requests•Updated Aug 31, 2026Aug 31, 2026

• protos

  Public
  Protocol buffer definitions for the SLSA attestation predicates

  Apache License 2.0

  •11 fork•00 stars•00 issues•11 pull request•Updated Aug 30, 2026Aug 30, 2026

• oss-na24-slsa-workshop-model-integrity

  Public
  Python

  •

  Apache License 2.0

  •22 forks•44 stars•11 issue•55 pull requests•Updated Aug 29, 2026Aug 29, 2026

• source-actions

  Public
  Source tool actions (fallback)

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 29, 2026Aug 29, 2026

• actions

  Public
  Stores the GitHub Actions used by the SLSA Source Tool

  Apache License 2.0

  •44 forks•33 stars•00 issues•11 pull request•Updated Aug 29, 2026Aug 29, 2026

• slsa

  Public
  Supply-chain Levels for Software Artifacts

  securitydevopssupply-chain-security

  securitydevopssupply-chain-security

  HTML

  •

  Other

  •291291 forks•1.9k1.9k stars•169169 issues•55 pull requests•Updated Aug 29, 2026Aug 29, 2026

• verifier

  Public
  SLSA Verifier

  00 forks•00 stars•00 issues•00 pull requests•Updated Aug 28, 2026Aug 28, 2026

• attested-build-environments-demo

  Public
  Reference implementation for the SLSA Attested Build Environments track

  Go

  •

  MIT License

  •33 forks•88 stars•11 issue•66 pull requests•Updated Aug 17, 2026Aug 17, 2026

• governance

  Public
  SLSA implementation of Community Specification governance

  3434 forks•2828 stars•1010 issues•00 pull requests•Updated Aug 11, 2026Aug 11, 2026

• slsa-verifier

  Public
  Verify provenance from SLSA compliant builders

  Go

  •

  Apache License 2.0

  •6969 forks•343343 stars•118118 issues•2424 pull requests•Updated Aug 7, 2026Aug 7, 2026

• slsa-github-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  securitysecurity-hardeningsecurity-tools+ 2

  securitysecurity-hardeningsecurity-toolsslsaslsaprovenance

  Go

  •

  Apache License 2.0

  •191191 forks•596596 stars•261261 issues•3737 pull requests•Updated Aug 7, 2026Aug 7, 2026

• example-package

  Public archive
  TypeScript

  •

  Apache License 2.0

  •2424 forks•2222 stars•3838 issues•00 pull requests•Updated Jul 1, 2026Jul 1, 2026

• source-policies

  Public
  Stores policies used by the SLSA Source Tool

  Apache License 2.0

  •99 forks•44 stars•00 issues•00 pull requests•Updated Jun 5, 2026Jun 5, 2026

• azure-devops-demo

  Public
  SLSA Azure DevOps Pipelines Extension

  TypeScript

  •

  Apache License 2.0

  •1414 forks•3030 stars•77 issues•99 pull requests•Updated Apr 7, 2026Apr 7, 2026

• gcb-buildtypes

  Public
  Community-maintained SLSA buildType for Google Cloud Build (GCB)

  Apache License 2.0

  •55 forks•44 stars•00 issues•00 pull requests•Updated Nov 25, 2025Nov 25, 2025

• example-trw

  Public archive
  Shell

  •

  Apache License 2.0

  •33 forks•11 star•00 issues•11 pull request•Updated Feb 24, 2025Feb 24, 2025

• SLSA-workshop-Japan

  Public
  33 forks•33 stars•00 issues•00 pull requests•Updated Oct 10, 2024Oct 10, 2024

• slsa-actions-template

  Public
  Create a SLSA builder reusable workflow using your tool.

  TypeScript

  •

  Apache License 2.0

  •66 forks•88 stars•88 issues•1212 pull requests•Updated Aug 13, 2024Aug 13, 2024

• slsa-jenkins-generator

  Public
  A proof-of-concept SLSA provenance generator for Jenkins

  Java

  •

  MIT License

  •66 forks•2525 stars•33 issues•66 pull requests•Updated Jul 29, 2024Jul 29, 2024

• slsa-policy

  Public
  Go

  •

  Apache License 2.0

  •44 forks•44 stars•1414 issues•00 pull requests•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop-organization

  Public
  Apache License 2.0

  •5959 forks•22 stars•00 issues•00 pull requests•Updated May 10, 2024May 10, 2024

• oss-na24-slsa-workshop

  Public
  Apache License 2.0

  •88 forks•1313 stars•55 issues•00 pull requests•Updated Apr 15, 2024Apr 15, 2024

• oss-na24-slsa-workshop-project1

  Public
  Go

  •

  Apache License 2.0

  •6868 forks•33 stars•00 issues•00 pull requests•Updated Apr 3, 2024Apr 3, 2024

• slsa-proposals

  Public
  SLSA Proposals

  1010 forks•1313 stars•00 issues•00 pull requests•Updated Jan 29, 2024Jan 29, 2024

• provenance-architecture-demo

  Public
  Go

  •

  Apache License 2.0

  •55 forks•1010 stars•11 issue•00 pull requests•Updated Dec 15, 2023Dec 15, 2023

• github-actions-buildtypes

  Public
  Community-maintained SLSA buildType for GitHub Actions

  Apache License 2.0

  •66 forks•1212 stars•22 issues•00 pull requests•Updated Jul 12, 2023Jul 12, 2023

• npm-cli

  Public
  A temporary fork of the npm cli for slsa-github-generator

  JavaScript

  •

  Other

  •4.7k4.7k forks•11 star•00 issues•00 pull requests•Updated May 1, 2023May 1, 2023

• github-actions-demo

  Public archive
  Proof-of-concept SLSA provenance generator for GitHub Actions

  Go

  •

  MIT License

  •2323 forks•100100 stars•66 issues•33 pull requests•Updated Nov 1, 2022Nov 1, 2022

• slsa-github-generator-go

  Public
  1919 forks•5858 stars•00 issues•22 pull requests•Updated Jun 1, 2022Jun 1, 2022