Ecosyste.ms: Repos
An open API service providing repository metadata for many open source software ecosystems.
GitHub / philips-labs / slsa-provenance-action
Github Action implementation of SLSA Provenance Generation
JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/philips-labs%2Fslsa-provenance-action
Stars: 44
Forks: 18
Open Issues: 26
License: mit
Language: Go
Repo Size: 676 KB
Dependencies:
1,339
Created: over 2 years ago
Updated: about 1 month ago
Last pushed: about 1 month ago
Last synced: about 1 month ago
Topics: github-action, github-actions, hacktoberfest, in-toto, provenance, security, security-tools, slsa, software-supply-chain
Files
Loading...
Readme
Loading...
Dependencies
go.mod
go
- cloud.google.com/go v0.99.0
- github.com/Azure/azure-sdk-for-go v46.4.0+incompatible
- github.com/Azure/go-autorest v14.2.0+incompatible
- github.com/Azure/go-autorest/autorest v0.11.8
- github.com/Azure/go-autorest/autorest/adal v0.9.5
- github.com/Azure/go-autorest/autorest/azure/auth v0.5.2
- github.com/Azure/go-autorest/autorest/azure/cli v0.4.1
- github.com/Azure/go-autorest/autorest/date v0.3.0
- github.com/Azure/go-autorest/logger v0.2.0
- github.com/Azure/go-autorest/tracing v0.6.0
- github.com/aws/aws-sdk-go-v2 v1.7.1
- github.com/aws/aws-sdk-go-v2/config v1.5.0
- github.com/aws/aws-sdk-go-v2/credentials v1.3.1
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.3.0
- github.com/aws/aws-sdk-go-v2/internal/ini v1.1.1
- github.com/aws/aws-sdk-go-v2/service/ecr v1.4.1
- github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.4.1
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.2.1
- github.com/aws/aws-sdk-go-v2/service/sso v1.3.1
- github.com/aws/aws-sdk-go-v2/service/sts v1.6.0
- github.com/aws/smithy-go v1.6.0
- github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20211215200129-69c85dc22db6
- github.com/chrismellard/docker-credential-acr-env v0.0.0-20220119192733-fe33c00cee21
- github.com/containerd/stargz-snapshotter/estargz v0.12.0
- github.com/davecgh/go-spew v1.1.1
- github.com/dimchansky/utfbom v1.1.0
- github.com/docker/cli v20.10.17+incompatible
- github.com/docker/distribution v2.8.1+incompatible
- github.com/docker/docker v20.10.17+incompatible
- github.com/docker/docker-credential-helpers v0.6.4
- github.com/form3tech-oss/jwt-go v3.2.2+incompatible
- github.com/golang/protobuf v1.5.2
- github.com/google/go-containerregistry v0.11.0
- github.com/google/go-github/v41 v41.0.0
- github.com/google/go-querystring v1.1.0
- github.com/inconshreveable/mousetrap v1.0.0
- github.com/jmespath/go-jmespath v0.4.0
- github.com/klauspost/compress v1.15.8
- github.com/kr/pretty v0.3.0
- github.com/mitchellh/go-homedir v1.1.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.0.3-0.20220114050600-8b9d41f48198
- github.com/pkg/errors v0.9.1
- github.com/pmezard/go-difflib v1.0.0
- github.com/sirupsen/logrus v1.9.0
- github.com/spf13/cobra v1.5.0
- github.com/spf13/pflag v1.0.5
- github.com/stretchr/testify v1.8.0
- github.com/vbatts/tar-split v0.11.2
- golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa
- golang.org/x/net v0.0.0-20220708220712-1185a9018129
- golang.org/x/oauth2 v0.0.0-20220718184931-c8730f7fcb92
- golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f
- golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
- google.golang.org/appengine v1.6.7
- google.golang.org/protobuf v1.28.0
- gopkg.in/yaml.v3 v3.0.1
.github/workflows/ci.yaml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
- anchore/sbom-action/download-syft 07978da4bdb4faa726e52dfc6b1bed63d4b56479 composite
- codecov/codecov-action d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 composite
- goreleaser/goreleaser-action f82d6c1c344bcacabba2c841718984797f664a6b composite
- philips-labs/slsa-provenance-action 752766b8a3b1ebd09d599e163eeec8fa39e677aa composite
- sigstore/cosign-installer 9becc617647dfa20ae7b1151972e9b3a2c338a2b composite
- ./ * composite
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/download-artifact 9bc31d5ccc31df68ecc42ccf4149144866c47d8a composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- actions/download-artifact 9bc31d5ccc31df68ecc42ccf4149144866c47d8a composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- philips-labs/slsa-provenance-action 752766b8a3b1ebd09d599e163eeec8fa39e677aa composite
Dockerfile
docker
- alpine 3.14.2 build
- gcr.io/distroless/base latest build
- golang 1.18-alpine build