DevITWay | Pavel Volkov 38828ec31e chore: SLSA L3 provenance, cosign .sig, Artifact Hub (#106) ...

- Add SLSA L3 provenance via slsa-github-generator reusable workflow
- Build job outputs binary hash for provenance generation
- Cosign now outputs .sig + .cert alongside .bundle (scorecard needs .sig)
- Remove fake provenance JSON and broken gh attestation step
- Add artifacthub-repo.yml for Artifact Hub discovery

2026-04-06 02:53:22 +03:00

11 KiB

Raw Blame History

View Raw