source-tool

command module

v0.7.0 Latest Latest Go to latest Published: Jul 8, 2026 License: Apache-2.0 Imports: 1 Imported by: 0

Details

A tool that helps users implement the SLSA Source Track.

Status: in development

REQUIREMENTS_MAPPING.md defines the rationale for how this tool meets the SLSA Source Requirements.

DESIGN.md explains more specifically how the system works.

GETTING_STARTED.md explains how to get started using the tool.

source-actions the GitHub Actions used with source-tool to implement SLSA Source Track requirements within GitHub projects.

source-policies stores each GitHub project's 'policy' which details the SLSA Source Level and other controls implemented by that repository.

There is no documentation for this package.

Path	Synopsis
internal
cmd
pkg
attest
audit
auth
auth/authfakes Code generated by counterfeiter.	Code generated by counterfeiter.
ghcontrol
policy
provenance
repo
repo/options
repo/repofakes Code generated by counterfeiter.	Code generated by counterfeiter.
slsa
sourcetool
sourcetool/backends/vcs/github
sourcetool/models
sourcetool/models/modelsfakes Code generated by counterfeiter.	Code generated by counterfeiter.
sourcetool/options
sourcetool/sourcetoolfakes Code generated by counterfeiter.	Code generated by counterfeiter.
testsupport