From a2a415d95f8698316028b723236599ba63c9b83f Mon Sep 17 00:00:00 2001 From: Victoria Date: Wed, 26 Nov 2025 20:57:54 +0100 Subject: [PATCH] feat(docs):sample contract for SLSA Source Track validation Signed-off-by: Victoria --- docs/examples/contracts/slsa/source-code.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 docs/examples/contracts/slsa/source-code.yaml diff --git a/docs/examples/contracts/slsa/source-code.yaml b/docs/examples/contracts/slsa/source-code.yaml new file mode 100644 index 000000000..2581dcfdd --- /dev/null +++ b/docs/examples/contracts/slsa/source-code.yaml @@ -0,0 +1,18 @@ +# SLSA source track validation contract +# Validates repository security configuration including branch protection, +# code review requirements, and commit signing policies +schemaVersion: v1 +policies: + materials: + - ref: commits-signed-required + with: + branches: "main" +policyGroups: + - ref: branch-protection + with: + branches: "main" + - ref: code-review + with: + branches: "main" +# runner: +# type: GITHUB_ACTION # or GITLAB_PIPELINE \ No newline at end of file