1
0
Fork 0
mirror of https://github.com/restic/restic.git synced 2025-03-30 00:00:14 +01:00

docs: SLSA is only setup for GHCR

This commit is contained in:
Michael Eischer 2025-03-26 18:46:52 +01:00
parent 13cb90b83a
commit 3f70485671

View file

@ -113,11 +113,11 @@ The following steps are necessary to build the binaries:
restic/builder \
go run helpers/build-release-binaries/main.go --version 0.14.0 --verbose
Verifying SLSA Provenance for Docker Images
Verifying SLSA Provenance for GHCR Docker Images
*******************************************
Our Docker images are built with SLSA (Supply-chain Levels for Software Artifacts)
provenance.
Our Docker images in the GitHub Container Registry (GHCR) are built with SLSA
(Supply-chain Levels for Software Artifacts) provenance.
To verify this provenance: