✨ SLSA provenance/build

[laurentsimon]

Add support to generate SLSA provenance for our linux amd64 build.
We released the v1 of the generator and the verifier, which will announce via a blog post soon. In the meantime, let scorecard be the first to install it!

Add support to generate SLSA provenance for our linux amd64 build

[codecov]

Codecov Report

Merging #1702 (dcdd59c) into main (2c34a46) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1702   +/-   ##
=======================================
  Coverage   51.08%   51.08%           
=======================================
  Files          87       87           
  Lines        7074     7074           
=======================================
  Hits         3614     3614           
  Misses       3220     3220           
  Partials      240      240           

[github-actions]

Integration tests success for
[7628b78]
(https://github.com/ossf/scorecard/actions/runs/1925236178)

[github-actions]

Integration tests success for
[27cde69]
(https://github.com/ossf/scorecard/actions/runs/1925239159)

[github-actions]

Integration tests success for
[bda18a9]
(https://github.com/ossf/scorecard/actions/runs/1925241205)

[naveensrinivasan]

This is cool! Thanks for starting this.

[github-actions]

Integration tests success for
[63134a9]
(https://github.com/ossf/scorecard/actions/runs/1929109251)

[github-actions]

Stale pull request message

[laurentsimon]

@naveensrinivasan how can I make sure this PR is not taken into account by the stale issue bot?

[naveensrinivasan]

@naveensrinivasan how can I make sure this PR is not taken into account by the stale issue bot?

I removed the label. This should be good for now. There are additional labels that we can add to the PR to avoid stale bot from closing

scorecard/.github/workflows/stale.yml

Line 42 in d2e88f2

exempt-pr-labels: 'awaiting-approval,work-in-progress'

[laurentsimon]

Ready for review.

[github-actions]

Integration tests success for
[75053cd]
(https://github.com/ossf/scorecard/actions/runs/2458145346)

[github-actions]

Integration tests success for
[879f133]
(https://github.com/ossf/scorecard/actions/runs/2458152344)

[github-actions]

Integration tests success for
[63143cc]
(https://github.com/ossf/scorecard/actions/runs/2458160806)

[naveensrinivasan]

This is cool! Thanks

[asraa]

YAY!

[github-actions]

Integration tests success for
[dcdd59c]
(https://github.com/ossf/scorecard/actions/runs/2462645559)