Skip to main content
SourceTrustSign in

Help center

Guides for SourceTrust: Importing dependencies, reviewing licenses, external obligations, publishing attestation pages, billing, plain-language license explainers, and procurement-oriented explainers for common open-source licenses.

Quick start: Your first page

← All articles

Create a project, import a lockfile or connect a repo, review each license, then publish. A live attestation page is only a few minutes from a new project.

  1. Create a project (Projects → New project).
  2. Open the project and click Import to upload a lockfile or SBOM, or connect a repository (GitHub, GitLab, or Azure DevOps) in Settings (see Help center → Integrations).
  3. Open each package, confirm its license, attach the license text, and set it to Approved.
  4. When packages are Live, click Publish on the project page.
  5. Click View public page to preview the public attestation page.