This repository is used to demonstrate the SLSA implementation. On the tag v0.1.19 you can see how the provenance is created, signed, written to the transparency logs and verified in the actions. The tag v0.1.19 is based on a modified SLSA logic, because at that time the official SLSA implementation was faulty, but in the meantime this has been corrected, so that with the tag v0.1.21 it was possible to switch to this.
More information can be found in the main repository: Applied Cybersecurity Django.