Prompt Buddy logoPrompt Buddy

github · GitHub Actions Docs

Actions Using artifact attestations and reusable workflows to achieve SLSA v1 Build Level 3 - GitHub Doc

Implements a secure software supply chain by combining artifact attestations with reusable workflows to meet SLSA v1 Build Level 3 requirements.

Import to Prompt Buddy

Derived skill

Files assembled from official documentation

Viewing SKILL.md

Actions Using artifact attestations and reusable workflows to achieve SLSA v1 Build Level 3 - GitHub Doc

Implements a secure software supply chain by combining artifact attestations with reusable workflows to meet SLSA v1 Build Level 3 requirements.

When To Use

Use when you need to configure GitHub Actions to meet SLSA v1 Build Level 3 security standards using artifact attestations and reusable workflows.

Reference Files

FileContainsUse For
SKILL.mdEntry point: scope, routing table, and workflow.Start here.
docs/actions-how-tos-secure-your-work-using-artifact-attestations-and-reusabl-workflow-guide.mdA guide on using GitHub Actions artifact attestations and reusable workflows to meet SLSA v1 Build Level 3 security requirements.Questions about a guide on using GitHub Actions artifact attestations and reusable workflows to meet SLSA v1 Build Level 3 security r...
examples/actions-how-tos-secure-your-work-using-artifact-attestations-and-reusabl.textA GitHub Actions workflow configuration demonstrating the use of artifact attestations and reusable workflows to meet SLSA v1 Build Level 3 requirements.Exact payloads, commands, or snippets shown in A GitHub Actions workflow configuration demonstrating the use of artifact attestations and reusable workflows to meet...
examples/actions-how-tos-secure-your-work-using-artifact-attestations-and-reusabl-2.textA CLI command demonstrating how to verify artifact attestations using the GitHub CLI to achieve SLSA v1 Build Level 3.Exact payloads, commands, or snippets shown in A CLI command demonstrating how to verify artifact attestations using the GitHub CLI to achieve SLSA v1 Build Level 3.
examples/actions-how-tos-secure-your-work-using-artifact-attestations-and-reusabl-3.textA CLI command demonstrating how to verify artifact attestations using the GitHub CLI to achieve SLSA v1 Build Level 3.Exact payloads, commands, or snippets shown in A CLI command demonstrating how to verify artifact attestations using the GitHub CLI to achieve SLSA v1 Build Level 3.

What This Skill Covers

    • GitHub Actions / - How-tos / - Secure your work / - Use artifact attestations / - Increase security rating
  • Main sections: In this article, Prerequisites, Step 1: Configuring your builds, Building with a reusable workflow, Building with artifact attestations.

Workflow

  1. Open the most relevant file under docs/ for the exact documented workflow and wording.
  2. Open schemas/ files for exact structured contracts.
  3. Open examples/ files for concrete requests, commands, snippets, and manifests.
  4. Do not add behavior or configuration that is not present in the attached source files.

Canonical source: https://docs.github.com/en/actions/how-tos/secure-your-work/use-artifact-attestations/increase-security-rating