SLSA provenance attestations

Named by 2 kept items in this workspace.

Search every workspace for SLSA provenance attestations. It matches the name as written, so it can find other things that share it.

The items that name it 2

How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
writeup2026-10-12It is written here as SLSA provenance attestations (build provenance; valid but does not encode workflow-step lineage).
build provenance; valid but does not encode workflow-step lineage
Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
article2026-06-02It is written here as SLSA provenance attestations (valid attestations on malicious versions).
valid attestations on malicious versions

All technologies in this workspace.