-
Notifications
You must be signed in to change notification settings - Fork 27
Add build attestation to CI release workflow #971
Copy link
Copy link
Open
Labels
CI/CDContinuous Integration and/or Continuous DeploymentContinuous Integration and/or Continuous Deploymentcode improvementA feature request that will improve the software and its maintainability, but be invisible to users.A feature request that will improve the software and its maintainability, but be invisible to users.
Description
Activity
Metadata
Metadata
Assignees
Labels
CI/CDContinuous Integration and/or Continuous DeploymentContinuous Integration and/or Continuous Deploymentcode improvementA feature request that will improve the software and its maintainability, but be invisible to users.A feature request that will improve the software and its maintainability, but be invisible to users.
Currently we use sigstore to sign our releases. There is a github action that goes a step further and more conveniently stores this in a more verifiable way on GH: https://github.com/actions/attest-build-provenance. I think we should add this as a build attestation proess.