All workflows

Workflow runs

• fix: install Ubuntu packages through public resolvers when the runner's resolver fails

  completed successfully:
  selftest#62:Pull request#42openedbymarkope
  apt-public-resolvers

  Nov 11, 20262m 39s
  More actions for workflow run 62

• chore: update Go version to 1.27.4 in go.mod

  completed successfully:
  selftest#61:Pull request#41openedbymarkope
  go-1.27.4

  Nov 11, 20261m 27s
  More actions for workflow run 61

• selftest

  completed successfully:
  selftest#60:Scheduled
  main

  Nov 9, 20261m 44s
  More actions for workflow run 60

• fix: increase timeout and add retry logic for artifact download in attest-provenance workflow

  completed successfully:
  selftest#59:Pull request#40openedbymarkope
  attest-download-retry

  Nov 9, 20261m 18s
  More actions for workflow run 59

• feat: add attest-provenance workflow for SLSA Build Level 3 provenance attestation

  completed successfully:
  selftest#58:Pull request#39openedbymarkope
  attest-provenance

  Nov 8, 20266m 15s
  More actions for workflow run 58

• feat: add root filesystem scanning and related self-test workflows

  completed successfully:
  selftest#57:Pull request#38openedbymarkope
  rootfs-scan

  Nov 5, 20261m 24s
  More actions for workflow run 57

• feat: add environment claim checks for signing account in release-image and selftest workflows

  completed successfully:
  selftest#56:Pull request#37openedbymarkope
  slsa-l3-signing

  Nov 5, 20261m 14s
  More actions for workflow run 56

• docs: update signing account roles in README for clarity

  completed successfully:
  selftest#55:Pull request#35openedbymarkope
  provenance-key-roles

  Nov 5, 20261m 9s
  More actions for workflow run 55

• fix: ensure all scripts are executable and update test scripts to reflect changes

  completed successfully:
  selftest#54:Pull request#34openedbymarkope
  sign-provenance-exec

  Nov 5, 20261m 34s
  More actions for workflow run 54

• feat: enhance image release workflow with signed provenance

  completed successfully:
  selftest#53:Pull request#33openedbymarkope
  signed-provenance

  Nov 5, 20261m 14s
  More actions for workflow run 53

• tools.lock: arm64 binaries; install-tool.sh picks the runner's architecture

  completed successfully:
  selftest#52:Pull request#32openedbymarkope
  feat/tools-arm64

  Nov 5, 20261m 9s
  More actions for workflow run 52

• shell-gate: reusable gate for shell and just repositories

  completed successfully:
  selftest#51:Pull request#31openedbymarkope
  feat/shell-gate

  Nov 4, 20261m 23s
  More actions for workflow run 51

• upload-copy: leave source-suppressed results out of code-scanning uploads

  completed successfully:
  selftest#50:Pull request#29openedbymarkope
  fix/upload-copy-source-suppressions

  Nov 4, 20261m 18s
  More actions for workflow run 50

• Enhance security workflow and documentation to support VEX file integration for vulnerability management

  completed successfully:
  selftest#49:Pull request#28openedbymarkope
  code-scanning-vex

  Nov 4, 20261m 24s
  More actions for workflow run 49

• docs: update README to clarify KMS roles required for signing tool

  completed successfully:
  selftest#48:Pull request#27openedbymarkope
  sign-openpgp-kms-roles

  Nov 3, 20261m 12s
  More actions for workflow run 48

• Implement OpenPGP signing tool with Cloud KMS integration

  completed successfully:
  selftest#47:Pull request#26openedbymarkope
  sign-openpgp

  Nov 3, 20261m 15s
  More actions for workflow run 47

• selftest

  completed successfully:
  selftest#46:Scheduled
  main

  Nov 2, 20261m 17s
  More actions for workflow run 46

• release-tag: the GitHub release's text from a release notes file (release-notes input)

  completed successfully:
  selftest#45:Pull request#25openedbymarkope
  release-notes

  Oct 31, 20261m 11s
  More actions for workflow run 45

• Enhance security workflow documentation and add scheduled-full option for comprehensive scans

  completed successfully:
  selftest#44:Pull request#24openedbymarkope
  scheduled-scan-scope

  Oct 30, 20261m 11s
  More actions for workflow run 44

• Update bun version to 1.4.4 in tools.lock

  completed successfully:
  selftest#43:Pull request#23openedbymarkope
  bun-1.4.4

  Oct 29, 20261m 14s
  More actions for workflow run 43

• security: fail on a skipped Helm chart; config setup, semgrep rule exclusion

  completed successfully:
  selftest#42:Pull request#22openedbymarkope
  config-scan-helm

  Oct 29, 20261m 17s
  More actions for workflow run 42

• Enhance error handling in pr.sh and Justfile.release for GitHub API calls

  completed successfully:
  selftest#41:Pull request#21openedbymarkope
  pr-guards

  Oct 28, 20261m 25s
  More actions for workflow run 41

• pr.sh: an empty TAG_PREFIX tags the bare version

  completed successfully:
  selftest#40:Pull request#20openedbymarkope
  bare-tag-prefix

  Oct 26, 20264m 11s
  More actions for workflow run 40

• selftest

  completed successfully:
  selftest#39:Scheduled
  main

  Oct 26, 20261m 13s
  More actions for workflow run 39

• tools.lock: helm 3.22.0

  completed successfully:
  selftest#38:Pull request#19openedbymarkope
  tools-helm

  Oct 26, 20261m 15s
  More actions for workflow run 38