diff --git a/README.md b/README.md index c58f0dc..b4ea912 100644 --- a/README.md +++ b/README.md @@ -21,6 +21,7 @@ This section lists software systems, services, or platforms that integrate with | Integration Name | Logo | Description | |------------------|------|-------------| +| GitHub | | GitHub is a developer platform popular across enterprises and open source. GitHub artifact attestations supports SLSA build provenance and SBOM in-toto predicate types. | | GitLab | | GitLab is a popular Git server that also provides CI/CD integrations. | | Grafeas || Grafeas is an open source metadata API that is used to store metadata relevant to software supply chains. Grafeas includes support for in-toto link metadata. | | GUAC || GUAC has the ability to ingest and parse SLSA and other in-toto ITE6 attestations (either wrapped in DSSE or standalone). | diff --git a/github/README.md b/github/README.md new file mode 100644 index 0000000..7965cb5 --- /dev/null +++ b/github/README.md @@ -0,0 +1,3 @@ +# GitHub + +GitHub is a developer platform popular across enterprises and open source. GitHub [artifact attestations](https://docs.github.com/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds) supports SLSA build provenance and SBOM in-toto predicate types. diff --git a/img/Integrations_logo/GitHub_logo.png b/img/Integrations_logo/GitHub_logo.png new file mode 100644 index 0000000..6cb3b70 Binary files /dev/null and b/img/Integrations_logo/GitHub_logo.png differ