ci: Add SBOMs and SLSA attestation to Dart and Python releases - Githubissues

atsign-foundation / noports

Connect to any device with no external listening ports open

https://noports.com

BSD 3-Clause "New" or "Revised" License

267 stars 15 forks source link

ci: Add SBOMs and SLSA attestation to Dart and Python releases #1053

Closed cpswan closed 4 months ago

cpswan commented 4 months ago

Progresses https://github.com/atsign-foundation/operations/issues/133 and https://github.com/atsign-foundation/operations/issues/139

- What I did

Added SBOMs
GitHub attestation for artifacts
SLSA attestation
Removed .sigstore

- How I did it

Dart: Ran some tests in my release_automation repo and copied the working YAML back into multibuild

Python: Based on the work in at_python

- How to verify it

We'll have to do some (pre) releases

- Description for the changelog

ci: Add SBOMs and SLSA attestation to Dart and Python releases