Issues

• What verify-artifact actually vouches for beyond identity and digest

  slsa-framework/slsa-verifier#899 · Filter by author mahirhir opened on Aug 25, 2026
  1

• Missing ARM64 support for slsa-framework/slsa-verifier/actions/installer

  slsa-framework/slsa-verifier#891 · Filter by author RoyalOughtness opened on Apr 12, 2026

• Node 20 deprecation notice

  slsa-framework/slsa-verifier#885 · Filter by author doyle31 opened on Mar 27, 2026
  1

• Support digest arguments (sha256:xxx, sha512:xxx) in verify-artifact command

  slsa-framework/slsa-verifier#876 · Filter by author suzuki-shunsuke opened on Jan 11, 2026
  1

• [discussion] Revamp and Modernize SLSA Build Track Tooling

  slsa-framework/slsa-verifier#872 · Filter by author Hayden-IO opened on Nov 11, 2025

• CVE-2025-22869 and CVE-2025-27144 vulnerabilities in slsa-verifier v2.7.0

  slsa-framework/slsa-verifier#846 · Filter by author mukhan-axon opened on May 27, 2025

• Python/pip package

  slsa-framework/slsa-verifier#841 · Filter by author ianlewis opened on Mar 18, 2025

• failed to download 10.root.json- while using slsa-verifier within enterprise network?

  slsa-framework/slsa-verifier#837 · Filter by author sohgaura opened on Feb 27, 2025
  4

• Verifying provenances of internal builds on external mirrors?

  slsa-framework/slsa-verifier#828 · Filter by author deeglaze opened on Jan 23, 2025
  2

• feat: parse Github Actions provenances with fully specified structs

  slsa-framework/slsa-verifier#778 · Filter by author ramonpetgrave64 opened on Jun 25, 2024

• feat: expose SigstoreTUFClient mocks

  slsa-framework/slsa-verifier#773 · Filter by author ramonpetgrave64 opened on May 21, 2024
  1

• Support off-line mode for air-gapped environments

  slsa-framework/slsa-verifier#766 · Filter by author pjbgf opened on May 3, 2024
  6

• SHA256SUM.md format is messy (not machine friendly)

  slsa-framework/slsa-verifier#759 · Filter by author udf2457 opened on Apr 23, 2024
  2

• feat: npmjs sigstore tuf: use ValidFor.Start and ValidFor.End

  slsa-framework/slsa-verifier#757 · Filter by author ramonpetgrave64 opened on Apr 16, 2024
  1

• Set of verification API

  slsa-framework/slsa-verifier#756 · Filter by author laurentsimon opened on Apr 14, 2024

• Merge slsa-policy repo with this repo

  slsa-framework/slsa-verifier#755 · Filter by author laurentsimon opened on Apr 12, 2024

• Support for SLSA GHA

  slsa-framework/slsa-verifier#744 · Filter by author laurentsimon opened on Mar 20, 2024
  3

• remove setup-go from the codeql-analysis workflow

  area:toolingtype:chore
  slsa-framework/slsa-verifier#740 · Filter by author ramonpetgrave64 opened on Jan 23, 2024
  1

• Feature: distinction between builder and signer for generators and npm

  slsa-framework/slsa-verifier#735 · Filter by author laurentsimon opened on Jan 13, 2024

• Support verification of generic builders

  slsa-framework/slsa-verifier#734 · Filter by author netomi opened on Jan 11, 2024
  9

• Output more verbose information during verification

  slsa-framework/slsa-verifier#733 · Filter by author netomi opened on Jan 11, 2024

• Support directory hashes

  slsa-framework/slsa-verifier#730 · Filter by author laurentsimon opened on Jan 8, 2024
  12

• bug: slsa-verifier failing to validate google cloud generated provenance

  area:gcbtype:bug
  slsa-framework/slsa-verifier#700 · Filter by author godofredoc opened on Aug 26, 2023
  9

• Wrap multiple errors

  good first issuestatus:help wantedtype:refactor
  slsa-framework/slsa-verifier#692 · Filter by author laurentsimon opened on Aug 18, 2023

• GCB v1.0 regression tests

  area:gcbarea:tests
  slsa-framework/slsa-verifier#690 · Filter by author laurentsimon opened on Aug 17, 2023 · GCB v1.0 provenance support