Skip to content

Store information about the provenance asset #819

@behnazh-w

Description

@behnazh-w

With this PR, we have more accurate provenance discovery and support various places that provenances may get stored, including GitHub release assets. With this refactoring, the information about the the provenance, such as the name and asset URL is not retained, however.

We need to refactor the AnalyzeContext.dynamic_data["provenance"] to retain the information related to the provenance.

Metadata

Metadata

Assignees

Labels

slsa-provenanceThe issues related to SLSA provenances

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions