feat(sethvargo/ratchet): GitHub artifact attestations config (aquaproj#46517)

Author: scop

pkgs/sethvargo/ratchet/pkg.yaml

@@ -1,2 +1,4 @@
 packages:
   - name: sethvargo/ratchet@v0.11.4
+  - name: sethvargo/ratchet
+    version: v0.9.2

pkgs/sethvargo/ratchet/registry.yaml

@@ -6,6 +6,16 @@ packages:
     description: A tool for securing CI/CD workflows with version pinning
     version_constraint: "false"
     version_overrides:
+      - version_constraint: semver("< 0.10.0")
+        asset: ratchet_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        checksum:
+          type: github_release
+          asset: ratchet_{{trimV .Version}}_SHA512SUMS
+          algorithm: sha512
+        overrides:
+          - goos: windows
+            format: zip
       - version_constraint: "true"
         asset: ratchet_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
         format: tar.gz
@@ -16,3 +26,5 @@ packages:
         overrides:
           - goos: windows
             format: zip
+        github_artifact_attestations:
+          signer_workflow: sethvargo/ratchet/.github/workflows/release.yml