From f23076ad390fa6ba8ef387b922c86f0847350b13 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adolfo=20Garc=C3=ADa=20Veytia=20=28Puerco=29?= Date: Thu, 3 Jul 2025 20:03:35 -0600 Subject: [PATCH] Add SLSA Source Provenance Workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Adolfo García Veytia (Puerco) --- .github/workflows/compute_slsa_source.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/workflows/compute_slsa_source.yaml diff --git a/.github/workflows/compute_slsa_source.yaml b/.github/workflows/compute_slsa_source.yaml new file mode 100644 index 0000000..5cc09c3 --- /dev/null +++ b/.github/workflows/compute_slsa_source.yaml @@ -0,0 +1,14 @@ +--- +name: SLSA Source +on: + push: + branches: [ "main" ] +permissions: {} + +jobs: + # Whenever new source is pushed recompute the slsa source information. + generate-provenance: + permissions: + contents: write # needed for storing the vsa in the repo. + id-token: write # meeded to mint yokens for signing + uses: slsa-framework/slsa-source-poc/.github/workflows/compute_slsa_source.yml@main