Example project for SLSA

Example project builds a simple binary using a variety of SLSA-compliant builders.

The code is built using bazelisk build:

• Bazelisk reads .bazelversion, fetches the correct version of Bazel, and then runs bazel build.
• Bazel reads WORKSPACE, fetches the rules_go module, and then compiles the hello binary.

For GitHub Actions-based builds, the artifact is uploaded using actions/upload-artifact.

Builders

• github-actions-demo.yaml (results): SLSA 1 provenance generated on GitHub Actions using https://github.com/slsa-framework/github-actions-demo.
• slsa-github-generator.yaml (results): SLSA 2 provenance generated on GitHub Actions using https://github.com/slsa-framework/slsa-github-generator.

slsa-github-generator e2e test status

Project health

Node.js builder e2e tests

Name	Status
create
push to main
push to main w/ dist-tag
push to branch
push to tag
release
workflow_dispatch

BYOB generic permissions builder e2e tests

Name	Status
workflow_dispatch
release
create
push
tag

BYOB low permissions builder e2e tests

Name	Status
workflow_dispatch
release
create
push
tag