Slsa Verifier Build Provenance Checker

---
name: "SLSA Verifier Build Provenance Checker"
slug: "slsa-verifier-build-provenance-checker"
description: "SLSA Verifier is the official tool from the SLSA framework for verifying build provenance attestations generated by SLSA-compliant builders. It checks that software artifacts were built from the expected source, by an authorized builder, without tampering in the build pipeline."
github_stars: 318
verification: "security_reviewed"
source: "https://github.com/slsa-framework/slsa-verifier"
category: "Security & Verification"
framework: "Claude Code"
tool_ecosystem:
  github_repo: "slsa-framework/slsa-verifier"
  github_stars: 318
---

# SLSA Verifier Build Provenance Checker

SLSA Verifier is the official tool from the SLSA framework for verifying build provenance attestations generated by SLSA-compliant builders. It checks that software artifacts were built from the expected source, by an authorized builder, without tampering in the build pipeline.

## Installation

Use the upstream install or setup path that matches your environment:
- $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.7.1
- $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier
- $ git clone git@github.com:slsa-framework/slsa-verifier.git

Requirements and caveats from upstream:
- [npm packages built using the SLSA3 Node.js builder](#npm-packages-built-using-the-slsa3-nodejs-builder)
- | source-branch | Expects a branch like main or dev. Not supported for all GitHub Workflow triggers. | [GitHub builders](https://github.com/slsa-framework/slsa-github-generator#generation-of-provenance) |
- #### npm packages built using the SLSA3 Node.js builder

Basic usage or getting-started notes:
- You have two options to install the verifier.
- ### Compilation from source
- #### Option 1: Install via go

- Source: https://github.com/slsa-framework/slsa-verifier
- Extracted from upstream docs: https://raw.githubusercontent.com/slsa-framework/slsa-verifier/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/slsa-verifier-build-provenance-checker/)