|
|
38828ec31e
|
chore: SLSA L3 provenance, cosign .sig, Artifact Hub (#106)
- Add SLSA L3 provenance via slsa-github-generator reusable workflow
- Build job outputs binary hash for provenance generation
- Cosign now outputs .sig + .cert alongside .bundle (scorecard needs .sig)
- Remove fake provenance JSON and broken gh attestation step
- Add artifacthub-repo.yml for Artifact Hub discovery
|
2026-04-06 02:53:22 +03:00 |
|
