Merge pull request 'ci: cosign keyless sigs, SBOM, provenance + fedora digest pin' (#7) from feat/sre-cosign-sbom-attestation into main
build-iso.yml #26 -Commit
3d35196a2d
pushed by
s8n
sec: AppArmor v0.6 stub — load profiles in complain mode
lint.yml #19 -Commit
dfda66ac7e
pushed by
s8n
sec: polish THREAT-MODEL.md for v0.7 public launch
lint.yml #18 -Commit
e4b6516f1c
pushed by
s8n
ci(bluebuild): pin actions to node20-safe tags
build-bluebuild.yml #16 -Commit
8c55802514
pushed by
s8n
ci: pin actions to node20-safe tags + runner sock pass-through
lint.yml #15 -Commit
73c2c68e32
pushed by
s8n
ci: TODO marker for SHA-pinning third-party actions
lint.yml #13 -Commit
b74ef5005d
pushed by
s8n
ci(bluebuild): pin blue-build/github-action to commit SHA
lint.yml #12 -Commit
4b80d06fde
pushed by
s8n
ci(bluebuild): pin blue-build/github-action to commit SHA
build-bluebuild.yml #11 -Commit
4b80d06fde
pushed by
s8n
ci: gate softprops release steps + add Forgejo API equivalents
lint.yml #10 -Commit
fe3239d5ed
pushed by
s8n
docs: test run report skeleton for v0.5.32 (Forgejo build)
lint.yml #9 -Commit
6db4b759fa
pushed by
s8n
feat(installer): promote eject-media reminder to its own box
lint.yml #8 -Commit
b64ee19e53
pushed by
s8n
docs: METHOD-CHANGELOG — 2026-05-06 entry for Forgejo build path
lint.yml #7 -Commit
4ff45d63f6
pushed by
s8n
docs: README — Forgejo build badge, primary host note, ci-latest URL
lint.yml #6 -Commit
2db1d85827
pushed by
s8n
docs: STRATEGY.md — primary git host moved to git.s8n.ru (Forgejo)
lint.yml #5 -Commit
b40e89a3cb
pushed by
s8n
v0.7 spike: BlueBuild recipe + ostreecontainer kickstart + cosign workflow
build-bluebuild.yml #3 -Commit
45d9b2d020
pushed by
s8n