Minimal end-to-end demo of SLSA Build L3 provenance: a 12-line Go binary that signs its own provenance on every tag, plus a verifier walkthrough.
golang security provenance attestation hands-on github-actions in-toto slsa supply-chain-security sigstore dsse slsa-verifier slsa-github-generator slsa-level-3
-
Updated
Apr 29, 2026 - Shell