From 30d0be3bbab553fc51557377baba2f7572dfc212 Mon Sep 17 00:00:00 2001
From: Hayden <8418760+Hayden-IO@users.noreply.github.com>
Date: Thu, 6 Aug 2026 21:23:19 -0700
Subject: [PATCH] docs: Add maintenance status for slsa-verifier (#898)

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index af02826..a46abad 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,14 @@
 
 <img align="right" src="https://slsa.dev/images/logo-mono.svg" width="140" height="140">
 
+> This project is **no longer actively maintained**.
+> We are working on guidance and simpler tooling to replace it.
+
+> If you are verifying attestations for GitHub Actions, we suggest generating them with
+> [GitHub artifact attestations](https://docs.github.com/en/actions/concepts/security/artifact-attestations),
+> a built-in solution for generating SLSA provenance on GitHub, and verifying them
+> with [`gh attestation verify`](https://cli.github.com/manual/gh_attestation_verify).
+
 <!-- markdown-toc --bullets="-" -i README.md -->
 
 <!-- toc -->