ci: stamp SBOM creator and sign build provenance attestations #29
license-check.yml
on: pull_request
Assert no runtime dependencies
4s
SPDX headers
5s