NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules · #2359 by repository stars
Last release 2 months ago
07 Aug 2026
Release timing varies
gaps range from 2 weeks to 5 months
Most releases are documented
notes for 13 of 17 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
334 releases · first in 2022
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0
https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0
<!-- Information on the next release will be added here. -->
<!-- Information on the next release will be added here. -->
upload-tag-name input was added to allow users to specify the tag name for the release when upload-assets is set to true.continue-on-error input was added which, when set to true, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the outcome output.upload-tag-name input was added to allow users to specify the tag name for the release when upload-assets is set to true.continue-on-error input was added which, when set to true, prevents the workflow from failing when a step fails. If set to true, the result of the reusable workflow will be return in the outcome output.repository-username secret input was added to allow users to pass their repository username that is stored in a Github Actions encrypted secret. This secret input should only be used for high-entropy registry username values such as AWS Access Key.gcp-workload-identity-provider and gcp-service-account inputshttps://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0
https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0
This release is the first Generally Available version of the Container Generator workflow. The Container Generator workflow is now considered stable and can be included in your production GitHub Actions workflows
This is also the first release (technically the second) with support for the generally available version of sigstore!! We hope to have fewer issues with sigstore infrastructure moving forward.
https://github.com/slsa-framework/slsa-github-generator/compare/v1.2.2...v1.4.0
\*_This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release._
*This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release.
This release is the first Generally Available version of the generic container workflow. The generic container workflow is now considered stable and can be included in your production GitHub Actions workflows
This is also the first release with support for the generally available version of sigstore!
This release also includes a couple of bug fixes:
https://github.com/slsa-framework/slsa-github-generator/compare/v1.2.2...v1.4.0-rc.2
Nothing published for this version
\*_This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release._
*This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release.
This release is the first Generally Available version of the generic container workflow. The generic container workflow is now considered stable and can be included in your production GitHub Actions workflows
This is also the first release with support for the generally available version of sigstore!
This release also includes a couple of bug fixes:
https://github.com/slsa-framework/slsa-github-generator/compare/v1.2.2...v1.4.0-rc.1
Nothing published for this version
This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release.
This is a pre-release. It is not meant for general consumption. The following is the proposed release notes for the official release.
This release is the first Generally Available version of the generic container workflow. The generic container workflow is now considered stable and can be included in your production GitHub Actions workflows
This is also the first release with support for the generally available version of sigstore!
This release also includes a couple of bug fixes:
https://github.com/slsa-framework/slsa-github-generator/compare/v1.2.2...v1.4.0-rc.0
Nothing published for this version
Nothing published for this version
This commit was created on GitHub.com and signed with GitHub’s verified signature . The key has expired.
c3a3e40
This commit was created on GitHub.com and signed with GitHub’s verified signature . The key has expired.
GPG key ID: 4AEE18F83AFDEB23 Expired
Verified Learn about vigilant mode .
This release fixes issues with signing provenance due to a change in Sigstore TUF root certificates ( #1163 ). This release also includes better handling of transient errors from the Rekor transparency logs.
@suzuki-shunsuke made their first contribution in #1061
@datosh made their first contribution in #1074
@pnacht made their first contribution in #1187
@dongheelee92 made their first contribution in #1209
Nothing published for this version
DO NOT USE THIS RELEASE. This version will no longer work and is not supported due to errors described in #1163. Please upgrade to [v1.2.2](https://gi
DO NOT USE THIS RELEASE. This version will no longer work and is not supported due to errors described in #1163. Please upgrade to v1.2.2 or later.
This release fixes an error that occurs on the "Generate Builder" step for various workflows.
FAILED: SLSA verification failed: could not find a matching valid signature entry
See #942
This release changes the buildType used in provenance created by the generic generator.
The previous value was:
"buildType": "https://github.com/slsa-framework/slsa-github-generator@v1",
The new value is:
"buildType": "https://github.com/slsa-framework/slsa-github-generator/generic@v1",
See #627
Previously the default file name for provenance was attestation.intoto.jsonl. This has been updated to be in line with intoto attestation file naming conventions. The file name now defaults to <artifact filename>.intoto.jsonl if there is a single artifact, or multiple.intoto.jsonl if there are multiple artifacts.
See #654
Private repository support was enhanced to required the private-repository input field as the repository name will be made public in the public Rekor transparency log.
Please add the following to your workflows if you opt into allowing repository names to be recorded in the public Rekor transparency log.
with:
private-repository: true
See #823
Support for private repositories was fixed. If using a private repository you must specify the private-repository input field as the repository name will be made public in the public Rekor transparency log.
Please add the following to your workflows if you opt into allowing repository names to be recorded in the public Rekor transparency log.
with:
private-repository: true
See #823
https://github.com/slsa-framework/slsa-github-generator/compare/v1.2.0...v1.2.1
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →