v0.6.0

Changelog

Other changes

• 627190b: Add multi-arch Docker image support (@marcofranssen)
• 1ff5208: Add source label on containers (@marcofranssen)
• 61786a1: Also publish the signatures as part of the release (@marcofranssen)
• f940c26: Bump actions/setup-go from 4.1.0 to 5.0.0 (@dependabot[bot])
• 292d5e0: Bump busybox to latest + bump ca-certificaes and vault-binary to latest (@marcofranssen)
• 1690c2e: Bump codecov/codecov-action from 3.1.4 to 3.1.5 (@dependabot[bot])
• f02eb63: Bump codecov/codecov-action from 3.1.5 to 4.0.2 (@dependabot[bot])
• a5d1270: Bump codecov/codecov-action from 4.0.2 to 4.1.0 (@dependabot[bot])
• 87498db: Bump cosign to v2.2.1 (@marcofranssen)
• dac9a32: Bump cosign to v2.2.3 (@marcofranssen)
• 4fd40a5: Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (@dependabot[bot])
• 3120adc: Bump github.com/hashicorp/vault/api from 1.10.0 to 1.11.0 (@dependabot[bot])
• 34abf28: Bump github.com/hashicorp/vault/api from 1.11.0 to 1.12.0 (@dependabot[bot])
• 5caad64: Bump github.com/spiffe/go-spiffe/v2 from 2.1.6 to 2.1.7 (@dependabot[bot])
• 269629c: Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot[bot])
• d11c1e0: Bump go to 1.22 (@marcofranssen)
• d493d25: Bump google.golang.org/grpc from 1.53.0 to 1.56.3 (@dependabot[bot])
• 8974a99: Bump hashicorp/setup-terraform from 2.0.3 to 3.0.0 (@dependabot[bot])
• 678457b: Bump hashicorp/vault in /example/vault/environments/local (@dependabot[bot])
• 66978ab: Bump hashicorp/vault in /example/vault/environments/local (@dependabot[bot])
• 919defd: Bump hashicorp/vault in /example/vault/environments/local (@dependabot[bot])
• 74eaf9c: Bump hashicorp/vault in /example/vault/environments/local (@dependabot[bot])
• 6dd2763: Bump philips-labs/slsa-provenance-action from 0.8.0 to 0.9.0 (@dependabot[bot])
• d7cfa18: Bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (@dependabot[bot])
• 0408f49: Bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (@dependabot[bot])
• c852cde: Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 (@dependabot[bot])
• c36ca04: Remove the release to dockerhub, only releasing to ghcr.io from now on (@marcofranssen)

Full Changelog: philips-labs/slsa-provenance-action@v0.5.1...v0.6.0