You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
4af6841 Merge pull request #27 from rshdhere/feat/goreleaser-openssf
b71529c ci: remove version pinning and add SLSA provenance attestation - Remove GitHub Actions version comments from checkout and setup-go steps - Rename "Set up GoReleaser" step to "Run GoReleaser" for clarity - Change GoReleaser version from pinned v6.4.0 to latest for automatic updates - Add SLSA provenance attestation step to sign release artifacts (tar.gz, zip, checksums.txt)
b344d65 Merge pull request #26 from rshdhere/fix/goreleaser-production-ci
e746eab chore(release): update SLSA provenance workflow and cosign signing configuration - Switch SLSA GitHub generator workflow from v2 tag to main branch - Expand cosign signing from checksum artifacts to all artifacts - Update cosign args: use quoted flags, replace oidc-issuer with oidc-provider=github, reorder for consistency - Remove duplicate signs section at end of .goreleaser.yaml