update

Signed-off-by: laurentsimon <[email protected]>
slsa-framework · Nov 9, 2023 · a0b1a04 · a0b1a04
1 parent f5b488d
commit a0b1a04
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/internal/builders/container/README.md b/internal/builders/container/README.md
@@ -30,6 +30,7 @@ project simply generates provenance as a separate step in an existing workflow.
   - [Provenance Example](#provenance-example)
 - [Integration With Other Build Systems](#integration-with-other-build-systems)
   - [Ko](#ko)
+  - [GoReleaser](#goreleaser)
 - [Provenance for matrix strategy builds](#provenance-for-matrix-strategy-builds)
 - [Verification](#verification)
   - [slsa-verifier](#slsa-verifier)
@@ -443,6 +444,10 @@ This section explains how to generate non-forgeable SLSA provenance with existin
          registry-password: ${{ secrets.GITHUB_TOKEN }}
    ```
 
+### [GoReleaser](#goreleaser)
+
+Follow the great blog post of [goreleaser.com](https://goreleaser.com/blog/slsa-generation-for-your-artifacts).
+
 ## Provenance for matrix strategy builds
 
 See the

diff --git a/internal/builders/generic/README.md b/internal/builders/generic/README.md
@@ -468,6 +468,8 @@ jobs:
       upload-assets: true # upload to a new release
 ```
 
+For more details, follow the great blog post on [goreleaser.com](https://goreleaser.com/blog/slsa-generation-for-your-artifacts).
+
 ### Provenance for JReleaser
 
 If you use [JReleaser](https://github.com/jreleaser/release-action) to generate your build, you can easily