Signed release packages using Github artifact attestation

[egecetin]

Recently GitHub release public beta for artifact signing https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/. With this PR, generated artifacts should also generate .sigstore.json files to verify packages. It should be ready to review. Since I changed permissions from a PR, looks like write permissions prohibited. I can't find a way to tweak it to get passing result from CI.

Note: Unfortunately requires drop of Ubuntu 18.04 support because of node version

• All attestations can be found in summaries: https://github.com/egecetin/PcapPlusPlus/actions/runs/9702477673
• Example attestation page: https://github.com/egecetin/PcapPlusPlus/attestations/1193027
• Example release page: https://github.com/egecetin/PcapPlusPlus/releases/tag/v24.1

[egecetin]

@seladb I updated this PR and finished work. Only need (or dependency) is #1408. After the merge of #1408 just need to test with Ubuntu 24.04 and Fedora 39 and it is ready to merge. You can review this PR when you have time for any change you might want.

[seladb]

@egecetin we removed Ubuntu 18.04, do you think you can update the PR and resolve conflicts?
If the PR is ready for review I can review it

[egecetin]

@seladb It is ready

[tigercosmos]

@egecetin seems the CI have some errors?

[egecetin]

@tigercosmos It is because of permissions. Since the write permissions set from a PR it prohibits the write permission so, it fails. You can check my master branch or run from my test tag https://github.com/egecetin/PcapPlusPlus/actions/runs/9858969300

[tigercosmos]

@tigercosmos It is because of permissions. Since the write permissions set from a PR it prohibits the write permission so, it fails. You can check my master branch or run from my test tag https://github.com/egecetin/PcapPlusPlus/actions/runs/9858969300

I see. it's cool!