/**
 * SLSA Provenance Verifier
 *
 * Evaluates a project's SLSA (Supply-chain Levels for Software Artifacts) level
 * based on build configuration, GitHub Actions workflows, and attestation files.
 *
 * Levels:
 *   0 — No evidence of any build process
 *   1 — Build script present (Dockerfile, CI workflow)
 *   2 — Signed build or slsa-github-generator action used
 *   3 — Hermetic build + provenance attestation file present
 */
import type { Finding } from "./types.js";
/**
 * Determine SLSA level (0–3) for a project directory.
 *
 * @returns Numeric level 0-3
 */
export declare function getSLSALevel(dir: string): number;
/**
 * Verify SLSA posture of a project directory and return findings for gaps.
 */
export declare function verifySLSA(dir: string): Finding[];
//# sourceMappingURL=slsa-verifier.d.ts.map