An open API service indexing awesome lists of open source software.

https://github.com/github/artifact-attestations-workflows

Demo repository showcasing how to use reusable workflows to build artifact attestations
https://github.com/github/artifact-attestations-workflows

package-security

Last synced: 5 months ago
JSON representation

Demo repository showcasing how to use reusable workflows to build artifact attestations

Awesome Lists containing this project

README

          

## Artifact Attestations Workflows

This repository showcases how to use reusable workflows with your repository to generate [artifact attestations](https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds).

Artifact attestations allow you establish build provenance for artifacts
built in your repositories.

## Background

See the [official documentation](https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds) on
using artifact attestations to establish build provenance and
the [blog post](https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/) introducing Artifact Attestations.

## License

This project is licensed under the terms of the CC0 open source license. Please refer to [CC0](./LICENSE.txt) for the full terms.

## Maintainers

See [CODEOWNERS](./CODEOWNERS) for a list of maintainers.

## Support

If you have any questions or issues following examples outlined in this repository,
please file an [issue](https://github.com/github/artifact-attestations-workflows/issues/new?template=Blank+issue) and we will assist you.