Merge pull request #38 from steiza/add-github

Add GitHub to in-toto friends
in-toto · Oct 17, 2024 · 3334f2a · 3334f2a
2 parents 53b37ea + 5acbf89
commit 3334f2a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -21,6 +21,7 @@ This section lists software systems, services, or platforms that integrate with
 
 | Integration Name | Logo | Description |
 |------------------|------|-------------|
+| GitHub           | <img src="img/Integrations_logo/GitHub_logo.png" width="50" height="50">| GitHub is a developer platform popular across enterprises and open source. GitHub artifact attestations supports SLSA build provenance and SBOM in-toto predicate types. |
 | GitLab           | <img src="img/Integrations_logo/Gitlab_logo.png" width="50" height="50">| GitLab is a popular Git server that also provides CI/CD integrations. |
 | Grafeas          |<img src="img/Integrations_logo/Grafeas_logo.png" width="50" height="50">| Grafeas is an open source metadata API that is used to store metadata relevant to software supply chains. Grafeas includes support for in-toto link metadata. |
 | GUAC             |<img src="img/Integrations_logo/Guac_logo.png" width="50" height="50">| GUAC has the ability to ingest and parse SLSA and other in-toto ITE6 attestations (either wrapped in DSSE or standalone). |

diff --git a/github/README.md b/github/README.md
@@ -0,0 +1,3 @@
+# GitHub
+
+GitHub is a developer platform popular across enterprises and open source. GitHub [artifact attestations](https://docs.github.com/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds) supports SLSA build provenance and SBOM in-toto predicate types.
diff --git a/img/Integrations_logo/GitHub_logo.png b/img/Integrations_logo/GitHub_logo.png
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		# GitHub

		GitHub is a developer platform popular across enterprises and open source. GitHub [artifact attestations](https://docs.github.com/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds) supports SLSA build provenance and SBOM in-toto predicate types.