@cleocode/git-shim — Greenflagged

Harness-agnostic git shim for CLEO agent branch-protection (T1118)

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

kryptobaseddev

cleogitshimagentbranch-protection

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
publish-pattern	new-deps-added	AI (publish-pattern): New dep is @cleocode/paths from same org/monorepo at matching version; consistent with coordinated monorepo releases.	ai	2026/05/29

View all versions

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.