diff --git a/docs/examples/contracts/slsa/source-code.yaml b/docs/examples/contracts/slsa/source-code.yaml new file mode 100644 index 000000000..2581dcfdd --- /dev/null +++ b/docs/examples/contracts/slsa/source-code.yaml @@ -0,0 +1,18 @@ +# SLSA source track validation contract +# Validates repository security configuration including branch protection, +# code review requirements, and commit signing policies +schemaVersion: v1 +policies: + materials: + - ref: commits-signed-required + with: + branches: "main" +policyGroups: + - ref: branch-protection + with: + branches: "main" + - ref: code-review + with: + branches: "main" +# runner: +# type: GITHUB_ACTION # or GITLAB_PIPELINE \ No newline at end of file