30 Commits

Include renames

Author	SHA1	Message	Date
forkless	34aad244e1	fix SBOM naming with github.ref_name, clean up extra SBOM file	2026-06-13 21:44:01 +02:00
forkless	dd976dc929	reorder provenance before release, set upload-assets: false so release job collects attestation	2026-06-13 21:29:46 +02:00
forkless	fad3c5252e	switch SBOM to anchore/sbom-action (reliable, no compile)	2026-06-13 21:12:43 +02:00
forkless	45762ba760	add cargo-cyclonedx install step before SBOM generation	2026-06-13 20:40:13 +02:00
forkless	b6821d2aef	reorder release before provenance in workflow	2026-06-13 20:30:19 +02:00
forkless	b27fc56bab	add slsa-verifier step to release workflow for build verification	2026-06-13 20:02:31 +02:00
forkless	fbfc2eb626	add SBOM generation to CI, document in governance	2026-06-13 19:36:12 +02:00
forkless	1a114efe66	add top-level permissions to workflow	2026-06-11 16:56:11 +02:00
forkless	00dccdcd7b	fix code scanning alert: add set -e to hash generation step	2026-06-11 16:49:42 +02:00
forkless	61cb32dc17	fix release workflow: provenance generates, release creates draft	2026-06-09 22:37:47 +02:00
forkless	a636525578	reorder release before provenance in workflow	2026-06-09 22:23:27 +02:00
forkless	8a8c0b408c	refresh stats after backup, stale CI check in skill	2026-06-09 22:06:20 +02:00
forkless	b5e2424301	enable SLSA provenance attestation upload	2026-06-09 17:53:11 +02:00
forkless	7386ecb67a	fix draft release: run release after provenance	2026-06-02 19:04:33 +02:00
forkless	d326a741fb	bump to v0.3.1, add draft release workflow	2026-06-02 18:49:58 +02:00
forkless	adaeb252da	Add cargo-deny, fix example, suppress warnings	2026-06-01 21:16:04 +02:00
forkless	fe26ba35a8	Eliminate warnings, add clippy+cargo-audit to CI, add fuzz target	2026-06-01 21:07:00 +02:00
forkless	c5ce853f90	Add test suite — 13 integration tests covering guard, config, ops, gvas	2026-06-01 19:28:27 +02:00
forkless	c7bf00854a	Bump Pages actions to v5 to suppress Node 20 warnings	2026-06-01 16:17:16 +02:00
forkless	c6e65b8de5	Fix Pages deploy with proper permissions	2026-06-01 14:19:35 +02:00
forkless	9d5a3dd406	Add GitHub Pages doc deployment	2026-06-01 14:14:43 +02:00
forkless	51d3d714ba	Add cargo doc generation to CI pipeline	2026-06-01 14:12:56 +02:00
forkless	821aa31a40	Enable SLSA provenance upload to release	2026-06-01 12:04:11 +02:00
forkless	3a3997bad9	Add tag trigger to CI workflow	2026-06-01 11:55:33 +02:00
forkless	0f9965bd1b	Remove --all-targets from CI check	2026-06-01 11:54:22 +02:00
forkless	8a405234d3	Add Node 24 env for GitHub Actions	2026-06-01 11:53:22 +02:00
forkless	2f59eae1af	Replace cargo test with cargo check in CI	2026-06-01 11:52:13 +02:00
forkless	e03e591a2e	Fix SLSA provenance as reusable workflow	2026-06-01 11:49:57 +02:00
forkless	4b4929245a	Add SLSA provenance generation	2026-06-01 11:04:41 +02:00
forkless	28b1d4161b	Add GitHub Actions CI/release pipeline	2026-06-01 11:01:34 +02:00