Vladimir Dubrovin f4ad34c35a Rework docker workflow, add build provenance attestations ... Docker: single workflow, one job per image per platform instead of one workflow per registry. Platforms are built in parallel and pushed by digest, then combined into a manifest list pushed to Docker Hub and GHCR at once, so both registries get identical digests. arm64 and arm/v7 build on native arm runners, ppc64le is dropped. Registry provenance/sbom attestations are disabled (they were shown as unknown/unknown entries in the registries), build provenance is attested with actions/attest-build-provenance instead and is verifiable with 'gh attestation verify oci://...'. Release binaries (rpm, deb, zip) are attested the same way. cosign version is pinned and images are signed by digest.		2026-08-20 20:04:30 +03:00
..
workflows	Rework docker workflow, add build provenance attestations	2026-08-20 20:04:30 +03:00
dependabot.yml	Add more docker platforms	2026-06-01 20:16:19 +03:00