slsa-github-generator

The SLSA GitHub Generator is a tool designed to generate and verify SLSA Build Level 3 provenance for projects hosted on GitHub, utilizing GitHub Actions to enhance software supply chain security and integrity. Its primary use case is to help developers establish a tamper-proof statement of their software creation process, thereby mitigating risks of supply chain attacks. Notable features include the ability to build custom builders and generators for SLSA compliance and integration with GitHub artifact attestations for verified provenance.