Skip to content

Milestones

List view

  • GCB v1.0 provenance support

    Overdue by 1 year(s)
    •
    Due by September 1, 2023
    •1/2 issues closed
    50% complete1 open1 closed

  • BYOB

    No due date
    •12/17 issues closed
    70% complete5 open12 closed

  • v1.0 support

    No due date
    •2/5 issues closed
    40% complete3 open2 closed

  • SLSA VSA support

    Verification and/or generation of SLSA Verification Summary Attestations (VSAs). See VSA definition in https://slsa.dev/verification_summary/v0.1

    No due date
    •2/2 issues closed
    100% complete0 open2 closed

  • Verification of npm packages GA

    Verification of npm packages built with the default GitHub builder (npm package provenance) and OSSF Node.js Builder

    No due date
    •7/11 issues closed
    63% complete4 open7 closed

  • GCB artifacts

    Overdue by 1 year(s)
    •
    Due by September 30, 2023
    •0/3 issues closed
    0% complete3 open0 closed

  • Installer GitHub Action

    A GitHub action will be added to allow installing the slsa-verifier in a [GitHub Actions](https://docs.github.com/en/actions) workflow.

    Overdue by 2 year(s)
    •
    Due by March 31, 2023
    •2/3 issues closed
    66% complete1 open2 closed

  • Container support

    Adds support for verifying SLSA provenance generated for container images by the SLSA [Container Generator](https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/container).

    Overdue by 2 year(s)
    •
    Due by March 31, 2023
    •2/4 issues closed
    50% complete2 open2 closed