Build

Minor security fixes and added docs on CRD Attack surface #111

Job	Run time
🔐 Verify Signed Commits	6s
⚖️ Verify SPDX License Headers	4s
🧾 Validate VEX Statements	7s
🏷️ Extract Version Information	3s
🏗️ IaC Security Scan (Trivy config)	24s
🎨 Check Formatting	12s
🧪 cargo-deny (License + Advisory + Sources)	23s
🛡️ Security Vulnerability Scan	24s
🦀 Build - Linux x86_64	5m 27s
🦀 Build - Linux ARM64	3m 45s
📦 Package Deployment Manifests	0s
📎 Clippy	1m 11s
🧪 Test	1m 57s
✍️ Sign Binary Artifacts	-1s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Chainguard	37s
🐳 Build and Push Docker Image - Distroless	29s
🔏 Attest Docker Image - Chainguard	12s
🔏 Attest Docker Image - Distroless	8s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	0s
🧾 Assemble OpenVEX	0s
🤖 Auto-VEX (presence)	0s
🔭 Container Security Scan - Chainguard	27s
🔭 Container Security Scan - Distroless	32s
🚀 Upload Release Assets	0s
	16m 27s

Provide feedback