Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr ...

This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.

2024-08-07 17:13:39 +01:00

1.1 KiB

Raw Blame History