v1.0.0-rc.2

What's Changed

• Bump sigstore/cosign-installer from 3.0.1 to 3.0.2 by @dependabot in #54
• Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in #55
• Bump docker/metadata-action from 4.3.0 to 4.4.0 by @dependabot in #56
• Bump sigstore/cosign-installer from 3.0.2 to 3.0.3 by @dependabot in #57
• Bump anchore/sbom-action from 0.14.1 to 0.14.2 by @dependabot in #58
• Update Alpine to 3.18 by @hiddeco in #59
• Bump actions/setup-go from 3.5.0 to 4.0.1 by @dependabot in #60
• Bump sigstore/cosign-installer from 3.0.3 to 3.0.5 by @dependabot in #61
• Bump docker/setup-qemu-action from 2.1.0 to 2.2.0 by @dependabot in #66
• Bump docker/metadata-action from 4.4.0 to 4.5.0 by @dependabot in #65
• Bump docker/setup-buildx-action from 2.5.0 to 2.6.0 by @dependabot in #64
• Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #63
• Bump docker/build-push-action from 4.0.0 to 4.1.0 by @dependabot in #62
• Bump docker/build-push-action from 4.1.0 to 4.1.1 by @dependabot in #71
• Bump docker/metadata-action from 4.5.0 to 4.6.0 by @dependabot in #70
• Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 by @dependabot in #69
• Bump docker/setup-buildx-action from 2.6.0 to 2.7.0 by @dependabot in #68
• Bump docker/login-action from 2.1.0 to 2.2.0 by @dependabot in #67
• Add SLSA3 generator to release workflow by @stefanprodan in #72

Full Changelog: v1.0.0-rc.1...v1.0.0-rc.2

Signed images

Verify and pull the container image:

cosign verify ghcr.io/fluxcd/source-watcher:v1.0.0-rc.2
docker pull ghcr.io/fluxcd/source-watcher:v1.0.0-rc.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.