ci(release): attest global artifacts (SBOMs, installer, source) + doc release verification - #329

Merged

jensholdgaard merged 5 commits into

mainfrom

sign-attest-global-artifacts-and-docs

Jul 2, 2026

Commits on Jul 2, 2026

ci(release): attest global artifacts (SBOMs, installer, source, checksums) + doc verification

jensholdgaard
and
claude
committed
a62c2d9
docs(security): scope signing claims to mechanism + rollout; exact download pattern

jensholdgaard
and
claude
committed
c940a69
Merge branch 'main' into sign-attest-global-artifacts-and-docs
jensholdgaard
authored
d6f2b53
docs(security): pin cosign identity to the exact tag; drop residual blanket claim

jensholdgaard
and
claude
committed
a38b9dc
docs(security): add --repo to the release-download example

jensholdgaard
and
claude
committed
be955ac