Doc: https://slsa.dev/spec/v1.2/source-requirements PoC: https://github.com/slsa-framework/source-tool / https://github.com/slsa-framework/source-actions / https://github.com/slsa-framework/source-policies
