Build

v0.2.1 #139

Job	Run time
🔐 Verify Signed Commits	4s
⚖️ Verify SPDX License Headers	4s
🛡️ Security Vulnerability Scan	28s
🏷️ Extract Version Information	10s
🧾 Validate VEX Statements	-1s
🎨 Check Formatting	0s
🏗️ IaC Security Scan (Trivy config)	-1s
🧪 cargo-deny (License + Advisory + Sources)	-1s
📎 Clippy	0s
🦀 Build - Linux x86_64	5m 12s
📦 Package Deployment Manifests	1m 36s
🦀 Build - Linux ARM64	3m 41s
🧪 Test	1m 44s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	19s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	18s
🔬 Generate SLSA Provenance Subjects	6s
🏛️ Generate SLSA Provenance / detect-env	4s
🏛️ Generate SLSA Provenance / generator	18s
🏛️ Generate SLSA Provenance / upload-assets	8s
🏛️ Generate SLSA Provenance / final	2s
🐳 Build and Push Docker Image - Chainguard	34s
🐳 Build and Push Docker Image - Distroless	39s
🔏 Attest Docker Image - Chainguard	7s
🔭 Grype Triage Scan - Distroless	25s
🔭 Grype Triage Scan - Chainguard	18s
🔏 Attest Docker Image - Distroless	10s
🤖 Auto-VEX (reachability)	2m 20s
🤖 Auto-VEX (presence)	2m 18s
🧾 Assemble OpenVEX	23s
🚀 Upload Release Assets	8s
🔭 Container Security Scan - Distroless	1m 16s
🔭 Container Security Scan - Chainguard	33s
	23m 22s

Provide feedback