From 3f70485671e623f1745451de3a8e5a175dfae1c1 Mon Sep 17 00:00:00 2001 From: Michael Eischer Date: Wed, 26 Mar 2025 18:46:52 +0100 Subject: [PATCH] docs: SLSA is only setup for GHCR --- doc/developer_information.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/developer_information.rst b/doc/developer_information.rst index f1eae3a67..a2d7adfe1 100644 --- a/doc/developer_information.rst +++ b/doc/developer_information.rst @@ -113,11 +113,11 @@ The following steps are necessary to build the binaries: restic/builder \ go run helpers/build-release-binaries/main.go --version 0.14.0 --verbose -Verifying SLSA Provenance for Docker Images +Verifying SLSA Provenance for GHCR Docker Images ******************************************* -Our Docker images are built with SLSA (Supply-chain Levels for Software Artifacts) -provenance. +Our Docker images in the GitHub Container Registry (GHCR) are built with SLSA +(Supply-chain Levels for Software Artifacts) provenance. To verify this provenance: