Go modules · #2196
github.com/slsa-framework/slsa-github-generator
v1.10.0slsa-framework/slsa-github-generator ↗Last release 20 days ago
07 Aug 2026
Release timing varies
gaps range from 2 weeks to 5 months
Most releases are documented
notes for 13 of 17 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
334 releases · first in 2022
Release timeline
334 releases since 2022Releases
- v1.10.1-0.20260807031949-bb91a05077af7 Aug 2026pre-release
Nothing published for this version
- v1.10.1-0.20260309230332-4d014fae4dbd9 Mar 2026pre-release
Nothing published for this version
- v1.10.1-0.20251020235111-a09dd8c05eda20 Oct 2025pre-release
Nothing published for this version
- v1.10.1-0.20250627180920-4876e96b826827 Jun 2025pre-release
Nothing published for this version
- v1.10.1-0.20250516140254-24e3463c4c5816 May 2025pre-release
Nothing published for this version
- v1.10.1-0.20250318231548-0617b3a0ca3f18 Mar 2025pre-release
Nothing published for this version
- v1.10.1-0.20250224223032-9103ac683d0024 Feb 2025pre-release
Nothing published for this version
- v1.10.1-0.20250224213012-f7dd8c54c20624 Feb 2025pre-release
Nothing published for this version
- v1.10.1-0.20250211194253-ed8f922e441f11 Feb 2025pre-release
Nothing published for this version
- v1.10.1-0.20250102204802-bad5834473742 Jan 2025pre-release
Nothing published for this version
- v1.10.1-0.20241204180621-27476483f3474 Dec 2024pre-release
Nothing published for this version
- v1.10.1-0.20241029144018-7618e0050a4f29 Oct 2024pre-release
Nothing published for this version
- v1.10.1-0.20241014070654-edb0d822032b14 Oct 2024pre-release
Nothing published for this version
- v1.10.1-0.20240814040129-3bcecb4ade4f14 Aug 2024pre-release
Nothing published for this version
- v1.10.1-0.20240701174109-312ad50a60681 Jul 2024pre-release
Nothing published for this version
- v1.10.1-0.20240523085119-40c607fde64a23 May 2024pre-release
Nothing published for this version
- v1.10.1-0.20240521204459-556329ff88ff21 May 2024pre-release
Nothing published for this version
- v1.10.1-0.20240517160152-0d22a386d5cb17 May 2024pre-release
Nothing published for this version
- v1.10.1-0.20240418180215-41733f74c02518 Apr 2024pre-release
Nothing published for this version
- v1.10.1-0.20240418175318-fc013c380ad518 Apr 2024pre-release
Nothing published for this version
- v1.10.1-0.20240418170951-72e91e9f516d18 Apr 2024pre-release
Nothing published for this version
- v1.10.1-0.20240328222245-e8c2dcff94b828 Mar 2024pre-release
Nothing published for this version
- v1.10.1-0.20240326163114-8869c8a5155f26 Mar 2024pre-release
Nothing published for this version
- v1.10.1-0.20240321154839-d6b8c9f3cf3221 Mar 2024pre-release
Nothing published for this version
- v1.10.021 Mar 2024
Additional notes
Open source →Release [v1.10.0] includes bug fixes and new features.
See the full change list.
v1.10.0: TUF fix
- The cosign TUF roots were fixed (#3350). More details here.
v1.10.0: Gradle Builder
- The Gradle Builder was fixed when the project root is the same as the repository root (#2727)
v1.10.0: Go Builder
- The
go-version-fileinput was fixed so that it can find thego.modfile (#2661)
v1.10.0: Container Generator
- A new
provenance-repositoryinput was added to allow reading provenance from a different container repository than the image itself (#2956)
- v1.10.0-rc.021 Mar 2024pre-release
- v1.9.2-0.20240321082809-d97d88e6cf7c21 Mar 2024pre-release
Nothing published for this version
- v1.9.2-0.20240321013440-e4fc9a017a7a21 Mar 2024pre-release
Nothing published for this version
- v1.9.120 Mar 2024
- v1.9.1-rc.020 Mar 2024pre-release
- v1.9.1-0.20240313203503-b595e069f78113 Mar 2024pre-release
Nothing published for this version
- v1.9.1-0.20240222100147-a66d8c0ab4ff22 Feb 2024pre-release
Nothing published for this version
- v1.9.1-0.20240220100515-5f89252a5d7f20 Feb 2024pre-release
Nothing published for this version
- v1.9.1-0.20240125210405-6c0e4f69e36825 Jan 2024pre-release
Nothing published for this version
- v1.9.1-0.20240124183920-2e7344b0aac324 Jan 2024pre-release
Nothing published for this version
- v1.9.1-0.20240116212033-56c554a2ebf916 Jan 2024pre-release
Nothing published for this version
- v1.9.1-0.20240111175302-7bf88f9bcebf11 Jan 2024pre-release
Nothing published for this version
- v1.9.1-0.20231206151702-e9626e1e36456 Dec 2023pre-release
Nothing published for this version
- v1.9.021 Aug 2023
Release notes
Open source →- New: A new framework to turn GitHub Actions into SLSA compliant builders.
Additional notes
Open source →Release [v1.9.0] includes bug fixes and new features.
See the full change list.
v1.9.0: BYOB framework (beta)
- New: A new framework to turn GitHub Actions into SLSA compliant builders.
v1.9.0: Maven builder (beta)
- New: A Maven builder to build Java projects and publish to Maven central.
v1.9.0: Gradle builder (beta)
- New: A Gradle builder to build Java projects and publish to Maven central.
v1.9.0: JReleaser builder
- New: A JReleaser builder that wraps the official JReleaser Action.
- v1.9.0-rc.0.0.20230822224827-07e64b653f1022 Aug 2023pre-release
Nothing published for this version
- v1.9.0-rc.021 Aug 2023pre-release
Nothing published for this version
- v1.8.1-0.20230821210859-9bc0d59bb73a21 Aug 2023pre-release
Nothing published for this version
- v1.8.02 Aug 2023
Release notes
Open source →- Added: A new
base64-subjects-as-filewas added to allow for specifying a large subject list.
Additional notes
Open source →Release [v1.8.0] includes bug fixes and new features.
See the full change list.
v1.8.0: Generic Generator
- Added: A new
base64-subjects-as-filewas added to allow for specifying a large subject list.
v1.8.0: Node.js Builder (beta)
- Fixed: Publishing for non-scoped packages was fixed (See #2359)
- Fixed: Documentation was updated to clarify that the GitHub Actions
deploymentevent is not supported. - Changed: The file extension for the generated provenance file was changed
from
.sigstoreto.build.slsain order to make it easier to identify provenance files regardless of file format. - Fixed: The publish action was fixed to address an issue with the package name when using Node 16.
- Added: A new
- v1.8.0-rc.21 Aug 2023pre-release
Nothing published for this version
- v1.8.0-rc.1.0.20230802232329-7a4f66bd43322 Aug 2023pre-release
Nothing published for this version
- v1.8.0-rc.125 Jul 2023pre-release
Nothing published for this version
- v1.8.0-rc.0.0.20230726014130-98007572c66026 Jul 2023pre-release
Nothing published for this version
- v1.8.0-rc.012 Jul 2023pre-release
Nothing published for this version
- v1.7.1-0.20230720013550-6d0e213d22e620 Jul 2023pre-release
Nothing published for this version
- v1.7.1-0.20230613002925-0bbc6064090c13 Jun 2023pre-release
Nothing published for this version
- v1.7.1-0.20230612021603-e36b0bcfd77112 Jun 2023pre-release
Nothing published for this version
- v1.7.06 Jun 2023
Release notes
Open source →- Added: A new go-version-file input was added. This allows you to specify a go.mod file in order to track which version of Go is used for your project.
v1.6.0
This release includes the first beta release of the Node.js builder. The Node.js builder provides a GitHub Actions reusable workflow that can be called to build a Node.js package, generate SLSA Build L3 compliant provenance, and publish it to the npm registry along with the package.
Additional notes
Open source →This release includes the first beta release of the Container-based builder. The Container-based builder provides a GitHub Actions reusable workflow that can be used to invoke a container image with a user-specified command to generate an artifact and SLSA Build L3 compliant provenance.
v1.7.0: Go builder
- Added: A new go-version-file input was added. This allows you to specify a go.mod file in order to track which version of Go is used for your project.
- v1.7.0-rc.16 Jun 2023pre-release
Nothing published for this version
- v1.7.0-rc.0.0.20230606190709-2c15ebe172f16 Jun 2023pre-release
Nothing published for this version
- v1.7.0-rc.05 Jun 2023pre-release
Nothing published for this version
- v1.6.1-0.20230605232900-921bfa1c304f5 Jun 2023pre-release
Nothing published for this version
- v1.6.09 May 2023
Release notes
Open source →This release includes the first beta release of the Node.js builder. The Node.js builder provides a GitHub Actions reusable workflow that can be called to build a Node.js package, generate SLSA Build L3 compliant provenance, and publish it to the npm registry along with the package.
Summary of changes
Go builder
New Features
- A new
prereleaseinput was added to allow users to create releases marked as prerelease whenupload-assetsis set totrue. - A new input
draft-releasewas added to allow users to create releases marked as draft whenupload-assetsis set totrue. - A new output
go-provenance-nameadded which can be used to retrieve the name of the provenance file generated by the builder.
Generic generator
New Features
- A new input
draft-releasewas added to allow users to create releases marked as draft whenupload-assetsis set totrue.
Container generator
The Container Generator was updated to use
cosignv2.0.0. No changes to the workflow's inputs or outputs were made.Changelog since v1.5.0
https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0
- A new
- v1.6.0-rc.31 May 2023pre-release
Nothing published for this version
- v1.6.0-rc.2.0.20230509061546-8ff4f7f40a209 May 2023pre-release
Nothing published for this version
- v1.6.0-rc.2.0.20230426010040-3c24b476df3026 Apr 2023pre-release
Nothing published for this version