UID2-7080: Add SLSA provenance for private operator artifacts - #2696

Merged

swibi-ttd merged 9 commits into

mainfrom

swi-UID2-7080-private-artifact-provenance

Aug 18, 2026

Commits on Aug 17, 2026

UID2-7080: Add SLSA provenance for private operator artifacts

swibi-ttd
and
cursoragent
committed
b993513
UID2-7080: Pin attestation signer workflows

swibi-ttd
and
cursoragent
committed
5f029d0
UID2-7080: Verify promoted private image tags

swibi-ttd
and
cursoragent
committed
86996d5
UID2-7080: Preserve standalone EIF release permission

swibi-ttd
and
cursoragent
committed
f43ec6a
UID2-7080: Preserve changelog pull request access

swibi-ttd
and
cursoragent
committed
143b57c
UID2-7080: Document legacy EIF rebuild limitation

swibi-ttd
and
cursoragent
committed
5004ac3
UID2-7080: Preserve private image manifest format

swibi-ttd
and
cursoragent
committed
a25bca5
UID2-7080: Preserve digest during tag promotion

swibi-ttd
and
cursoragent
committed
77a5e48

Commits on Aug 18, 2026

UID2-7080: Pin private images to Docker media types

swibi-ttd
and
cursoragent
committed
03f2f00