Generate Slsa Build Provenance In Github Actions

Name: Generate Slsa Build Provenance In Github Actions
Author: agentskillexchange

ASecurity

Attach signed SLSA provenance to GitHub Actions builds so release artifacts ship with verifiable supply-chain metadata.

36 stars
0 votes
0 copies
1 view
Added June 8, 2026

ai-agentspythongonodenodejsdockerawsgitsecuritydocumentation

Security analysis

A100/100

Scanned June 8, 2026

npx -y skills add agentskillexchange/skills --skill generate-slsa-build-provenance-in-github-actions --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Generate Slsa Build Provenance In Github Actions?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Generate Slsa Build Provenance In Github Actions

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/agentskillexchange-generate-slsa-build-provenance-in-github-actions/badge)](https://www.skillsdirectory.com/skills/agentskillexchange-generate-slsa-build-provenance-in-github-actions)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: "Generate SLSA build provenance in GitHub Actions"
slug: "generate-slsa-build-provenance-in-github-actions"
description: "Attach signed SLSA provenance to GitHub Actions builds so release artifacts ship with verifiable supply-chain metadata."
github_stars: 566
verification: "security_reviewed"
source: "https://github.com/slsa-framework/slsa-github-generator"
author: "SLSA maintainers"
publisher_type: "organization"
category: "Security & Verification"
framework: "Multi-Framework"
tool_ecosystem:
  github_repo: "slsa-framework/slsa-github-generator"
  github_stars: 566
---

# Generate SLSA build provenance in GitHub Actions

Attach signed SLSA provenance to GitHub Actions builds so release artifacts ship with verifiable supply-chain metadata.

## Prerequisites

GitHub Actions, SLSA GitHub Generator

## Installation

Requirements and caveats from upstream:
- [![docker-bench-security stars](https://img.shields.io/github/stars/docker/docker-bench-security?logo=github&label=docker/docker-bench-security)](https://github.com/docker/docker-bench-security)
- [![powertools-lambda-python stars](https://img.shields.io/github/stars/aws-powertools/powertools-lambda-python?logo=github&label=aws-powertools/powertools-lambda-python)](https://github.com/aws-powertools/powertools-l...
- | [Node.js](https://nodejs.org) projects | [Node.js Builder](internal/builders/nodejs/README.md) | Builds and generates provenance for npm packages | [Beta since v1.6.0](https://github.com/slsa-framework/slsa-github-g...

Basic usage or getting-started notes:
- [SLSA Build level 3 and above](https://slsa.dev/spec/v1.0/levels). See some
- [popular projects](#hall-of-fame) generating provenance using this project.
- tools for building a SLSA builder on GitHub using the

- Source: https://github.com/slsa-framework/slsa-github-generator
- Extracted from upstream docs: https://raw.githubusercontent.com/slsa-framework/slsa-github-generator/HEAD/README.md

## Documentation

- https://github.com/slsa-framework/slsa-github-generator

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/generate-slsa-build-provenance-in-github-actions/)