Build

ci(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 #141

Job	Run time
⚖️ Verify SPDX License Headers	3s
🔐 Verify Signed Commits	6s
🏷️ Extract Version Information	3s
🧾 Validate VEX Statements	10s
🛡️ Security Vulnerability Scan	21s
🎨 Check Formatting	14s
🧪 cargo-deny (License + Advisory + Sources)	29s
🏗️ IaC Security Scan (Trivy config)	21s
🦀 Build - Linux x86_64	5m 2s
🦀 Build - Linux ARM64	3m 52s
📦 Package Deployment Manifests	0s
📎 Clippy	1m 18s
🧪 Test	1m 41s
✍️ Sign Binary Artifacts	-1s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Chainguard	31s
🐳 Build and Push Docker Image - Distroless	24s
🔏 Attest Docker Image - Chainguard	13s
🔏 Attest Docker Image - Distroless	10s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	0s
🔭 Container Security Scan - Distroless	27s
🤖 Auto-VEX (reachability)	-1s
🔭 Container Security Scan - Chainguard	26s
🤖 Auto-VEX (presence)	-1s
🧾 Assemble OpenVEX	-1s
🚀 Upload Release Assets	0s
	15m 47s

Provide feedback