Would be great if this repo would provide a signed image and supply provenance and SBOM attestations (eg from a repo of mine). I'd be happy to open a PR if there's interest.
PS: I could not find the published image initially, I'd suggest to add the "packages" section to the home of this repo so it's visible from there (I had to go to the org, then "packages").
Would be great if this repo would provide a signed image and supply provenance and SBOM attestations (eg from a repo of mine). I'd be happy to open a PR if there's interest.
PS: I could not find the published image initially, I'd suggest to add the "packages" section to the home of this repo so it's visible from there (I had to go to the org, then "packages").