Skip to content

Commit b27760e

Browse files
authored
feat(docs):sample contract for SLSA Source Track validation (#2586)
Signed-off-by: Victoria <[email protected]>
1 parent 3c8fde9 commit b27760e

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
# SLSA source track validation contract
2+
# Validates repository security configuration including branch protection,
3+
# code review requirements, and commit signing policies
4+
schemaVersion: v1
5+
policies:
6+
materials:
7+
- ref: commits-signed-required
8+
with:
9+
branches: "main"
10+
policyGroups:
11+
- ref: branch-protection
12+
with:
13+
branches: "main"
14+
- ref: code-review
15+
with:
16+
branches: "main"
17+
# runner:
18+
# type: GITHUB_ACTION # or GITLAB_PIPELINE

0 commit comments

Comments
 (0)