corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08785-5dfe-726a-9918-c136576b92d9

Understanding GitHub Artifact Attestations

ianlewis.org · published 30 May 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at ianlewis.org Wayback capture
1blogs citing
First cited
19 Aug 2024
Most recent
19 Aug 2024
Rank this month
not ranked
Links from this post
20
Words captured
2,008

Cited by

Blog
In the post
Date
failsafe.monster
Artifact attestations Read at the source ↗
19 Aug 2024

Links from this post

Link
Host
https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
github.blog
https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds
docs.github.com
https://github.com/actions/attest-build-provenance
github.com
https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect
docs.github.com
https://github.com/sigstore/fulcio
github.com
https://docs.sigstore.dev/certificate_authority/oidc-in-fulcio/
docs.sigstore.dev
https://github.com/sigstore/fulcio/blob/main/docs/oid-info.md
github.com
https://github.com/in-toto/attestation/blob/main/spec/v1/predicate.md
github.com
https://github.com/cli/cli/tree/trunk/pkg/cmd/attestation/verify
github.com
https://theupdateframework.io/
theupdateframework.io
https://slsa.dev/spec/v1.0/levels
slsa.dev
https://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/
checkmarx.com
https://docs.github.com/en/actions/learn-github-actions/contexts
docs.github.com
https://github.com/slsa-framework/slsa-github-generator/tree/main
github.com
https://docs.github.com/en/actions/using-workflows/reusing-workflows
docs.github.com
https://docs.github.com/en/actions/learn-github-actions/understanding-github-actions
docs.github.com
https://github.com/slsa-framework/slsa-github-generator/
github.com
https://twitter.com/haydentherapper
twitter.com
https://twitter.com/thePetgrave
twitter.com
https://twitter.com/lsim99
twitter.com