axodotdev / axodotdev/cargo-dist
add SLSA to generated workflows as a feature
Open
feature request - new integration
supplychain security
- Dominant language
- Rust
- Stars
- 2.1k
- Forks
- 149
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 32
Description
https://slsa.dev/
Contributor guide
Research direction
Start with the SLSA specification at slsa.dev and inspect cargo-dist's generated workflow implementation. Define which SLSA capability the generated workflows should provide, then identify how it can be configured and verified; done means the requested SLSA support is generated consistently and documented by tests or workflow checks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, rust
- Domain
- devops, release, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100