Victor Zverovich 1ccba0cf80 Attach SLSA provenance to the draft instead of a new release ...

With upload-assets the SLSA generator created and published its own
release (and tag) to host the attestation, duplicating the draft. Disable
upload-assets and add a job that downloads the provenance artifact and
attaches it to the draft alongside the source zip.

2026-06-09 06:23:34 +02:00

..

workflows

Attach SLSA provenance to the draft instead of a new release

2026-06-09 06:23:34 +02:00

CODEOWNERS

Add CODEOWNERS

2026-05-31 21:45:33 -07:00

dependabot.yml

Correct comments

2024-06-16 11:05:38 -07:00

FUNDING.yml

Add funding configuration for GitHub

2025-12-31 09:21:49 -08:00

issue_template.md

Add an issue template

2022-04-08 07:53:42 -07:00

pull_request_template.md

Improve license and PR template wording

2023-02-26 09:08:53 -08:00

SECURITY.md

Move security policy from README to .github/SECURITY.md

2026-06-01 06:51:41 -07:00