We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3c8fde9 commit b27760eCopy full SHA for b27760e
docs/examples/contracts/slsa/source-code.yaml
@@ -0,0 +1,18 @@
1
+# SLSA source track validation contract
2
+# Validates repository security configuration including branch protection,
3
+# code review requirements, and commit signing policies
4
+schemaVersion: v1
5
+policies:
6
+ materials:
7
+ - ref: commits-signed-required
8
+ with:
9
+ branches: "main"
10
+policyGroups:
11
+ - ref: branch-protection
12
13
14
+ - ref: code-review
15
16
17
+# runner:
18
+# type: GITHUB_ACTION # or GITLAB_PIPELINE
0 commit comments