Build

ci(deps): bump github/codeql-action in the actions-routine group (#67) #152

Job	Run time
🔐 Verify Signed Commits	6s
⚖️ Verify SPDX License Headers	4s
🛡️ Security Vulnerability Scan	20s
🧪 cargo-deny (License + Advisory + Sources)	21s
🏷️ Extract Version Information	7s
🏗️ IaC Security Scan (Trivy config)	20s
🧾 Validate VEX Statements	-1s
📎 Clippy	-1s
🎨 Check Formatting	-1s
🦀 Build - Linux x86_64	6m 4s
🦀 Build - Linux ARM64	4m 1s
📦 Package Deployment Manifests	-1s
🧪 Test	1m 40s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	11s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	10s
🔬 Generate SLSA Provenance Subjects	5s
🏛️ Generate SLSA Provenance / detect-env	5s
🏛️ Generate SLSA Provenance / generator	29s
🏛️ Generate SLSA Provenance / final	2s
🏛️ Generate SLSA Provenance / upload-assets	0s
🐳 Build and Push Docker Image - Chainguard	37s
🐳 Build and Push Docker Image - Distroless	41s
🔭 Grype Triage Scan - Chainguard	19s
🔭 Grype Triage Scan - Distroless	18s
🔏 Attest Docker Image - Chainguard	8s
🔏 Attest Docker Image - Distroless	13s
🤖 Auto-VEX (presence)	2m 14s
🤖 Auto-VEX (reachability)	2m 15s
🧾 Assemble OpenVEX	18s
🔭 Container Security Scan - Distroless	26s
🔭 Container Security Scan - Chainguard	29s
🚀 Upload Release Assets	-1s
	21m 58s

Provide feedback