SLSA：软件供应链完整性框架

bash slsa-verifier verify-artifact --source-uri github.com/org/repo --builder-id --provenance-path <provenance.json>