Introducing Artifact Attestations–now in public beta
Generate and verify signed attestations for anything you make with GitHub Actions.
Where does your software (really) come from?
GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.