From 9b384b4c69a0cb3825ce712f32bc3dd573fe4cae Mon Sep 17 00:00:00 2001 From: Victoria Date: Thu, 4 Dec 2025 09:03:09 +0100 Subject: [PATCH] docs(compliance): update sample contract for slsa 1.2 latest version Signed-off-by: Victoria --- docs/examples/contracts/slsa/source-code.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/docs/examples/contracts/slsa/source-code.yaml b/docs/examples/contracts/slsa/source-code.yaml index 2581dcfdd..c11566f19 100644 --- a/docs/examples/contracts/slsa/source-code.yaml +++ b/docs/examples/contracts/slsa/source-code.yaml @@ -3,6 +3,10 @@ # code review requirements, and commit signing policies schemaVersion: v1 policies: + attestation: + - ref: runner-automated + with: + runner: "GITHUB_ACTION" # or GITLAB_PIPELINE materials: - ref: commits-signed-required with: @@ -14,5 +18,5 @@ policyGroups: - ref: code-review with: branches: "main" -# runner: -# type: GITHUB_ACTION # or GITLAB_PIPELINE \ No newline at end of file +runner: + type: GITHUB_ACTION # or GITLAB_PIPELINE \ No newline at end of file