Use Sigstore attestation helper APIs for provenance checking#14931

Merged

mitchdenny merged 4 commits intorelease/13.2from

sigstore-attestation-apis

Mar 5, 2026

Commits on Mar 4, 2026

refactor: use Sigstore attestation helper APIs for provenance checking

Mitch Denny
and
Copilot
committed
chore: remove non-Sigstore NpmProvenanceChecker codepath

Mitch Denny
and
Copilot
committed
Address PR review: type-safe JSON handling and richer error reporting

Mitch Denny
and
Copilot
committed
Apply pattern matching suggestion for JsonArray count check

Mitch Denny
and
Copilot
committed