GitHub Enables SLSA Build Level 3 Provenance by Default on All Public Repositories
As of August 1, 2026, GitHub automatically generates SLSA Build Level 3 attestations for every Actions workflow run on a public repository. The software supply chain becomes verifiable without effort — and regulatory compliance follows.
