Repository navigation

ci: SLSA Build L3 provenance and SBOM attestations - #2760

Open

dunglas wants to merge 4 commits into

mainfrom

ci/slsa-l3-sbom

Open

ci: SLSA Build L3 provenance and SBOM attestations#2760
dunglas wants to merge 4 commits into
mainfrom
ci/slsa-l3-sbom

Commits on Oct 24, 2026
- ci: build release artifacts in reusable workflows for SLSA Build L3
  dunglas
  committed
  7cd6483
- ci: sign attestations in dedicated jobs
  dunglas
  committed
  1b6cc9d
- ci: attest SPDX SBOMs for release binaries and Docker images
  dunglas
  committed
  46512d5
- chore: require admin review for workflow changes
  dunglas
  committed
  9ad86d8