philips-labs/SLSA Build Provenance Action
An action to generate SLSA build provenance for an artifact
View on GitHubTrust Signals
- Scorecard Score
- Scorecard 6–8scored Jul 6, 2026
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- MIT
Pinned Snippet
uses: philips-labs/slsa-provenance-action@6b2fd198d38ba72fb3cc08fbc52da2ebaef2efad # v0.9.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| command | The command to use (available options: generate) | no | generate |
| subcommand | The subcommand to use when generating provenance | no | files |
| github_context | internal (do not set): the "github" context object in json | yes | ${{ toJSON(github) }} |
| runner_context | internal (do not set): the "runner" context object in json | yes | ${{ toJSON(runner) }} |
| arguments | commandline options for the given subcommand | yes | — |
| install-dir | Where to install the slsa-provenance binary | no | $HOME/.slsa-provenance |
Outputs
no outputs