actions-marketplace-validations/SLSA Build Provenance Action
An action to generate SLSA build provenance for an artifact
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 18, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/philips-labs_slsa-provenance-action@d51e5784ebe634d7ea0229a334c97e73b8d04a94 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| command | The command to use (available options: generate) | no | generate |
| subcommand | The subcommand to use when generating provenance | no | files |
| github_context | internal (do not set): the "github" context object in json | yes | ${{ toJSON(github) }} |
| runner_context | internal (do not set): the "runner" context object in json | yes | ${{ toJSON(runner) }} |
| arguments | commandline options for the given subcommand | yes | — |
| install-dir | Where to install the slsa-provenance binary | no | $HOME/.slsa-provenance |
Outputs
no outputs