Example SLSA provenance

slsa-github-actions-go-builder.json

{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://slsa.dev/provenance/v0.2",
  "subject": [
    {
      "name": "binary-linux-amd64",
      "digest": {
        "sha256": "6292ee2efd5465706969ea671049028e3c275e88a405439a858e9d766b519518"
      }
    }
  ],
  "predicate": {
    "builder": {
      "id": "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@refs/heads/main"
    },
    "buildType": "https://github.com/slsa-framework/slsa-github-generator/go@v1",
    "invocation": {
      "configSource": {
        "uri": "git+https://github.com/slsa-framework/example-package@refs/heads/main",
        "digest": {
          "sha1": "d6c0f3190ac8705db68f0fe5f183373f63aadb5d"
        },
        "entryPoint": ".github/workflows/e2e.go.schedule.main.adversarial-build-provenance.slsa3.yml"
      },
      "parameters": {},
      "environment": {
        "arch": "X64",
        "github_actor": "laurentsimon",
        "github_actor_id": "64505099",
        "github_base_ref": "",
        "github_event_name": "schedule",
        "github_event_payload": {
          "schedule": "0 9 * * *"
        },
        "github_head_ref": "",
        "github_ref": "refs/heads/main",
        "github_ref_type": "branch",
        "github_repository_id": "486325809",
        "github_repository_owner": "slsa-framework",
        "github_repository_owner_id": "80431187",
        "github_run_attempt": "1",
        "github_run_id": "2710710667",
        "github_run_number": "84",
        "github_sha1": "d6c0f3190ac8705db68f0fe5f183373f63aadb5d",
        "os": "ubuntu20"
      }
    },
    "buildConfig": {
      "version": 1,
      "steps": [
        {
          "command": [
            "/opt/hostedtoolcache/go/1.18.4/x64/bin/go",
            "mod",
            "vendor"
          ],
          "env": null,
          "workingDir": "/home/runner/work/example-package/example-package"
        },
        {
          "command": [
            "/opt/hostedtoolcache/go/1.18.4/x64/bin/go",
            "build",
            "-mod=vendor",
            "-trimpath",
            "-tags=netgo",
            "-o",
            "binary-linux-amd64"
          ],
          "env": [
            "GOOS=linux",
            "GOARCH=amd64",
            "GO111MODULE=on",
            "CGO_ENABLED=0"
          ],
          "workingDir": "/home/runner/work/example-package/example-package"
        }
      ]
    },
    "metadata": {
      "buildInvocationID": "2710710667-1",
      "completeness": {
        "parameters": true,
        "environment": false,
        "materials": false
      },
      "reproducible": false
    },
    "materials": [
      {
        "uri": "git+https://github.com/slsa-framework/example-package@refs/heads/main",
        "digest": {
          "sha1": "d6c0f3190ac8705db68f0fe5f183373f63aadb5d"
        }
      },
      {
        "uri": "https://github.com/actions/virtual-environments/releases/tag/ubuntu20/20220717.1"
      }
    ]
  }
}