github.com/slsa-framework/slsa-github-generator
v1.10.0
#2196 most downloaded on Go modules
slsa-framework/slsa-github-generator
What this package is like to depend on
Last release 17 days ago
07 Aug 2026
Release timing varies
gaps range from 2 weeks to 5 months
Most releases are documented
notes for 13 of 17 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
334 releases · first in 2022
6 releases in the last 12 months
see the full history below
Release timeline
334 releases · Apr 2022 to Aug 2026Releases
latest 60 of 334-
v1.10.1-0.20260807031949-bb91a05077af07 Aug 2026 pre-releaseNothing published for this version
-
v1.10.1-0.20260309230332-4d014fae4dbd09 Mar 2026 pre-releaseNothing published for this version
-
v1.10.1-0.20251020235111-a09dd8c05eda20 Oct 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250627180920-4876e96b826827 Jun 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250516140254-24e3463c4c5816 May 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250318231548-0617b3a0ca3f18 Mar 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250224223032-9103ac683d0024 Feb 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250224213012-f7dd8c54c20624 Feb 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250211194253-ed8f922e441f11 Feb 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20250102204802-bad58344737402 Jan 2025 pre-releaseNothing published for this version
-
v1.10.1-0.20241204180621-27476483f34704 Dec 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20241029144018-7618e0050a4f29 Oct 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20241014070654-edb0d822032b14 Oct 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240814040129-3bcecb4ade4f14 Aug 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240701174109-312ad50a606801 Jul 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240523085119-40c607fde64a23 May 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240521204459-556329ff88ff21 May 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240517160152-0d22a386d5cb17 May 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240418180215-41733f74c02518 Apr 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240418175318-fc013c380ad518 Apr 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240418170951-72e91e9f516d18 Apr 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240328222245-e8c2dcff94b828 Mar 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240326163114-8869c8a5155f26 Mar 2024 pre-releaseNothing published for this version
-
v1.10.1-0.20240321154839-d6b8c9f3cf3221 Mar 2024 pre-releaseNothing published for this version
-
v1.10.021 Mar 2024Release notes
Open source →Release [v1.10.0] includes bug fixes and new features.
See the full change list.
v1.10.0: TUF fix
- The cosign TUF roots were fixed (#3350). More details here.
v1.10.0: Gradle Builder
- The Gradle Builder was fixed when the project root is the same as the repository root (#2727)
v1.10.0: Go Builder
- The
go-version-fileinput was fixed so that it can find thego.modfile (#2661)
v1.10.0: Container Generator
- A new
provenance-repositoryinput was added to allow reading provenance from a different container repository than the image itself (#2956)
-
v1.10.0-rc.021 Mar 2024 pre-releaseRelease notes
Open source →#label:release v1.10.0-rc.0
Signed-off-by: laurentsimon [email protected]
-
v1.9.2-0.20240321082809-d97d88e6cf7c21 Mar 2024 pre-releaseNothing published for this version
-
v1.9.2-0.20240321013440-e4fc9a017a7a21 Mar 2024 pre-releaseNothing published for this version
-
v1.9.120 Mar 2024 -
v1.9.1-rc.020 Mar 2024 pre-release -
v1.9.1-0.20240313203503-b595e069f78113 Mar 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240222100147-a66d8c0ab4ff22 Feb 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240220100515-5f89252a5d7f20 Feb 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240125210405-6c0e4f69e36825 Jan 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240124183920-2e7344b0aac324 Jan 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240116212033-56c554a2ebf916 Jan 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20240111175302-7bf88f9bcebf11 Jan 2024 pre-releaseNothing published for this version
-
v1.9.1-0.20231206151702-e9626e1e364506 Dec 2023 pre-releaseNothing published for this version
-
v1.9.021 Aug 2023Release notes
Open source →- New: A new framework to turn GitHub Actions into SLSA compliant builders.
Release notes
Open source →Release [v1.9.0] includes bug fixes and new features.
See the full change list.
v1.9.0: BYOB framework (beta)
- New: A new framework to turn GitHub Actions into SLSA compliant builders.
v1.9.0: Maven builder (beta)
- New: A Maven builder to build Java projects and publish to Maven central.
v1.9.0: Gradle builder (beta)
- New: A Gradle builder to build Java projects and publish to Maven central.
v1.9.0: JReleaser builder
- New: A JReleaser builder that wraps the official JReleaser Action.
-
v1.9.0-rc.0.0.20230822224827-07e64b653f1022 Aug 2023 pre-releaseNothing published for this version
-
v1.9.0-rc.021 Aug 2023 pre-releaseNothing published for this version
-
v1.8.1-0.20230821210859-9bc0d59bb73a21 Aug 2023 pre-releaseNothing published for this version
-
v1.8.002 Aug 2023Release notes
Open source →- Added: A new
base64-subjects-as-filewas added to allow for specifying a large subject list.
Release notes
Open source →Release [v1.8.0] includes bug fixes and new features.
See the full change list.
v1.8.0: Generic Generator
- Added: A new
base64-subjects-as-filewas added to allow for specifying a large subject list.
v1.8.0: Node.js Builder (beta)
- Fixed: Publishing for non-scoped packages was fixed (See #2359)
- Fixed: Documentation was updated to clarify that the GitHub Actions
deploymentevent is not supported. - Changed: The file extension for the generated provenance file was changed
from
.sigstoreto.build.slsain order to make it easier to identify provenance files regardless of file format. - Fixed: The publish action was fixed to address an issue with the package name when using Node 16.
- Added: A new
-
v1.8.0-rc.201 Aug 2023 pre-releaseNothing published for this version
-
v1.8.0-rc.1.0.20230802232329-7a4f66bd433202 Aug 2023 pre-releaseNothing published for this version
-
v1.8.0-rc.125 Jul 2023 pre-releaseNothing published for this version
-
v1.8.0-rc.0.0.20230726014130-98007572c66026 Jul 2023 pre-releaseNothing published for this version
-
v1.8.0-rc.012 Jul 2023 pre-releaseNothing published for this version
-
v1.7.1-0.20230720013550-6d0e213d22e620 Jul 2023 pre-releaseNothing published for this version
-
v1.7.1-0.20230613002925-0bbc6064090c13 Jun 2023 pre-releaseNothing published for this version
-
v1.7.1-0.20230612021603-e36b0bcfd77112 Jun 2023 pre-releaseNothing published for this version
-
v1.7.006 Jun 2023Release notes
Open source →- Added: A new go-version-file input was added. This allows you to specify a go.mod file in order to track which version of Go is used for your project.
v1.6.0
This release includes the first beta release of the Node.js builder. The Node.js builder provides a GitHub Actions reusable workflow that can be called to build a Node.js package, generate SLSA Build L3 compliant provenance, and publish it to the npm registry along with the package.
Release notes
Open source →This release includes the first beta release of the Container-based builder. The Container-based builder provides a GitHub Actions reusable workflow that can be used to invoke a container image with a user-specified command to generate an artifact and SLSA Build L3 compliant provenance.
v1.7.0: Go builder
- Added: A new go-version-file input was added. This allows you to specify a go.mod file in order to track which version of Go is used for your project.
-
v1.7.0-rc.106 Jun 2023 pre-releaseNothing published for this version
-
v1.7.0-rc.0.0.20230606190709-2c15ebe172f106 Jun 2023 pre-releaseNothing published for this version
-
v1.7.0-rc.005 Jun 2023 pre-releaseNothing published for this version
-
v1.6.1-0.20230605232900-921bfa1c304f05 Jun 2023 pre-releaseNothing published for this version
-
v1.6.009 May 2023Release notes
Open source →This release includes the first beta release of the Node.js builder. The Node.js builder provides a GitHub Actions reusable workflow that can be called to build a Node.js package, generate SLSA Build L3 compliant provenance, and publish it to the npm registry along with the package.
Summary of changes
Go builder
New Features
- A new
prereleaseinput was added to allow users to create releases marked as prerelease whenupload-assetsis set totrue. - A new input
draft-releasewas added to allow users to create releases marked as draft whenupload-assetsis set totrue. - A new output
go-provenance-nameadded which can be used to retrieve the name of the provenance file generated by the builder.
Generic generator
New Features
- A new input
draft-releasewas added to allow users to create releases marked as draft whenupload-assetsis set totrue.
Container generator
The Container Generator was updated to use
cosignv2.0.0. No changes to the workflow's inputs or outputs were made.Changelog since v1.5.0
https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0
- A new
-
v1.6.0-rc.301 May 2023 pre-releaseNothing published for this version
-
v1.6.0-rc.2.0.20230509061546-8ff4f7f40a2009 May 2023 pre-releaseNothing published for this version
-
v1.6.0-rc.2.0.20230426010040-3c24b476df3026 Apr 2023 pre-releaseNothing published for this version