Move workflow (#2)

* add slsa workflow

Signed-off-by: Tom Hennen <tomhennen@google.com>

* move the workflow

Signed-off-by: Tom Hennen <tomhennen@google.com>

---------

Signed-off-by: Tom Hennen <tomhennen@google.com>

Author: TomHennen

.github/workflows/compute_slsa_source.yml

@@ -0,0 +1,13 @@
+
+name: SLSA Source
+on:
+  push:
+    branches: [ "master" ]
+
+jobs:
+  # Whenever new source is pushed recompute the slsa source information.
+  check-change:
+    permissions:
+      contents: write # needed for storing the vsa in the repo.
+      id-token: write
+    uses: slsa-framework/slsa-source-poc/.github/workflows/compute_slsa_source.yml@main