From fa07f8eeb43384e5b8b8b2e11e318b12571f999f Mon Sep 17 00:00:00 2001 From: Victoria Date: Tue, 20 Jan 2026 16:04:24 +0100 Subject: [PATCH] docs(slsa): update slsa example contract Signed-off-by: Victoria --- docs/examples/contracts/slsa/source-code.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/examples/contracts/slsa/source-code.yaml b/docs/examples/contracts/slsa/source-code.yaml index c11566f19..e95398775 100644 --- a/docs/examples/contracts/slsa/source-code.yaml +++ b/docs/examples/contracts/slsa/source-code.yaml @@ -1,13 +1,17 @@ # SLSA source track validation contract # Validates repository security configuration including branch protection, -# code review requirements, and commit signing policies +# code review requirements, identity management, and commit signing policies schemaVersion: v1 policies: attestation: - ref: runner-automated with: runner: "GITHUB_ACTION" # or GITLAB_PIPELINE + - ref: runner-authenticated materials: + - ref: pr-code-owner-review-required + with: + branches: "main" - ref: commits-signed-required with: branches: "main"