Generate and verify signed attestations for anything you make with GitHub Actions.

Where does your software (really) come from?
GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.
Learn more
Generate and verify signed attestations for anything you make with GitHub Actions.


GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.