Gary Ritchie 9e2e0cc30d Attest release artifacts with build provenance (#52) ... Add actions/attest-build-provenance step to the release workflow so main.js and styles.css are signed via Sigstore and verifiable with `gh attestation verify`. Grants the job id-token: write and attestations: write to support OIDC token minting and recording.		2026-05-12 18:15:55 -06:00
..
lint.yml	Fix lint permissions and validate release tags	2026-03-28 15:15:32 -06:00
release.yml	Attest release artifacts with build provenance (#52)	2026-05-12 18:15:55 -06:00