diff --git a/docs/examples/contracts/slsa/github.yaml b/docs/examples/contracts/slsa/github.yaml new file mode 100644 index 000000000..aead5fd6a --- /dev/null +++ b/docs/examples/contracts/slsa/github.yaml @@ -0,0 +1,15 @@ +# Require a container image reference, SLSA provenance and include SLSA complicance verification +schemaVersion: v1 + +materials: + - type: CONTAINER_IMAGE + name: container + - type: SLSA_PROVENANCE + name: slsa-attestation + +policyGroups: + - ref: slsa-checks + with: + provenance_material_name: slsa-attestation + runner: GITHUB_ACTION + issuer: "GitHub" \ No newline at end of file