mirror of
https://github.com/slsa-framework/slsa-verifier.git
synced 2026-08-07 21:58:12 +00:00
docs: Add maintenance status for slsa-verifier (#898)
Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
This commit is contained in:
@@ -8,6 +8,14 @@
|
||||
|
||||
<img align="right" src="https://slsa.dev/images/logo-mono.svg" width="140" height="140">
|
||||
|
||||
> This project is **no longer actively maintained**.
|
||||
> We are working on guidance and simpler tooling to replace it.
|
||||
|
||||
> If you are verifying attestations for GitHub Actions, we suggest generating them with
|
||||
> [GitHub artifact attestations](https://docs.github.com/en/actions/concepts/security/artifact-attestations),
|
||||
> a built-in solution for generating SLSA provenance on GitHub, and verifying them
|
||||
> with [`gh attestation verify`](https://cli.github.com/manual/gh_attestation_verify).
|
||||
|
||||
<!-- markdown-toc --bullets="-" -i README.md -->
|
||||
|
||||
<!-- toc -->
|
||||
|
||||
Reference in New Issue
Block a user