sigs.k8s.io/tejolote (go): A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Keywords: attestation|provenance|sbom|sigstore|slsa