Add support for provenance discoverable on Maven Central
Open
@benmss is already working on this.
Since Jul 15, 2024.
enhancement
slsa-provenance
- Dominant language
- Python
- Stars
- 210
- Forks
- 36
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 2
Description
Currently, provenances are only automatically discovered from npm, or user provided JFrog repositories. Some projects hosted on Maven Central also have provenance files alongside artefacts, and these can be supported too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.