Example project builds a simple binary using a variety of SLSA-compliant builders.
The code is built using bazelisk build:
- Bazelisk reads .bazelversion, fetches the correct version of Bazel, and
then runs
bazel build. - Bazel reads WORKSPACE, fetches the rules_go module, and then compiles the
hellobinary.
For GitHub Actions-based builds, the artifact is uploaded using actions/upload-artifact.
- github-actions-demo.yaml (results): SLSA 1 provenance generated on GitHub Actions using https://github.com/slsa-framework/github-actions-demo.
- slsa-github-generator.yaml (results): SLSA 2 provenance generated on GitHub Actions using https://github.com/slsa-framework/slsa-github-generator.
| Name | Status |
|---|---|
| create |  |
| push to main |  |
| push to main w/ dist-tag |  |
| push to branch |  |
| push to tag |  |
| release |  |
| workflow_dispatch |  |
| Name | Status |
|---|---|
| workflow_dispatch |  |
| release |  |
| create |  |
| push |  |
| tag |  |
| Name | Status |
|---|---|
| workflow_dispatch |  |
| release |  |
| create |  |
| push |  |
| tag |  |