← Home

@tachybase/plugin-workflow-approval

npm Repository Homepage

Approval base in Workflow

51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sealdaytomyjan

Keywords

ApprovalWorkflow

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance slsa-provenance AI (provenance): Package consistently published via GitHub Actions with SLSA attestation; this is the expected CI/CD pattern for this monorepo. ai
provenance publisher-changed AI (provenance): Transition from sealday to GitHub Actions reflects a move to automated CI/CD publishing, corroborated by SLSA provenance attestation. ai

Versions (showing 51 of 92)

View all versions
Version Deps Published
1.6.24 0 / 21
1.6.23 0 / 21
1.6.22 0 / 21
1.6.21 0 / 21
1.6.20 0 / 21
1.6.19 0 / 21
1.6.18 0 / 21
1.6.17 0 / 21
1.6.16 0 / 21
1.6.15 0 / 21
1.6.14 0 / 21
1.6.13 0 / 21
1.6.12 0 / 21
1.6.11 0 / 21
1.6.10 0 / 21
1.6.9 0 / 21
1.6.8 0 / 21
1.6.7 0 / 21
1.6.6 0 / 21
1.6.5 0 / 21
1.6.4 0 / 21
1.6.3 0 / 21
1.6.1 0 / 21
1.6.0 0 / 21
1.5.1 0 / 21
1.5.0 0 / 21
1.4.0 0 / 21
1.3.25 0 / 21
1.3.24 0 / 21
1.3.23 0 / 21
1.3.22 0 / 20
1.3.21 0 / 13
1.3.20 0 / 13
1.3.19 0 / 13
1.3.18 0 / 13
1.3.17 0 / 13
1.3.16 0 / 13
1.3.15 0 / 13
1.3.14 0 / 13
1.3.13 0 / 13
1.3.12 0 / 13
1.3.11 0 / 13
1.3.10 0 / 13
1.3.9 0 / 13
1.3.8 0 / 13
1.3.7 0 / 13
1.3.6 0 / 13
1.3.5 0 / 13
1.3.2 0 / 13
1.3.1 0 / 13
1.3.0 0 / 13

v1.6.24

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.6.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.