BoomchainLabs Attest Build Provenance
Version updated for https://github.com/BoomchainLabs/attest-build-provenance to version Error loading version from page [https://github.com/marketplace/actions/boomchainlabs-attest-build-provenance], unable to determine latest release.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
The “BoomchainLabs Attest Build Provenance” GitHub Action automates the generation of signed build provenance attestations for Docker images and other workflow artifacts, ensuring builds are secure, verifiable, and traceable. It supports SLSA-compliant predicates, pushes attestations to container registries, and creates GitHub storage records for traceability. This action streamlines compliance with supply chain security standards and improves transparency in the build process.