Files
Charon/provenance-main.json
GitHub Actions 8bcfe28709 docs: comprehensive supply chain security QA audit report
Complete security audit covering:
- CodeQL analysis (0 Critical/High issues)
- Trivy vulnerability scanning (clean)
- Shellcheck linting (2 issues fixed)
- Supply chain skill testing
- GitHub Actions workflow validation
- Regression testing

All critical checks PASSED. Ready for deployment.
2026-01-10 03:33:38 +00:00

38 lines
948 B
JSON

{
"_type": "https://in-toto.io/Statement/v1",
"subject": [
{
"name": "main",
"digest": {
"sha256": "c64e409257828deb697fa9316af5e7e78a91459c8456b5aaa007d46c07542900"
}
}
],
"predicateType": "https://slsa.dev/provenance/v1",
"predicate": {
"buildDefinition": {
"buildType": "https://github.com/user/local-build",
"externalParameters": {
"source": {
"uri": "git+https://github.com/user/charon@local",
"digest": {
"sha1": "0000000000000000000000000000000000000000"
}
}
},
"internalParameters": {},
"resolvedDependencies": []
},
"runDetails": {
"builder": {
"id": "https://github.com/user/local-builder@v1.0.0"
},
"metadata": {
"invocationId": "local-1768015740",
"startedOn": "2026-01-10T03:29:00Z",
"finishedOn": "2026-01-10T03:29:00Z"
}
}
}
}