This milestone will add a new reusable workflow to build and publish Node.js npm packages with that means the provenance requirements
for SLSA Level 3 by simply adding a new job to their existing GitHub Actions workflow.
This will serve as the "Trusted Builder" for npm RFC-0049.
List view
0 issues of 2 selected
- Status: Open.#2499 In slsa-framework/slsa-github-generator;
- Status: Open.#2139 In slsa-framework/slsa-github-generator;