Build

ci(deps): bump the actions-routine group with 2 updates (#74) #171

Job	Run time
⚖️ Verify SPDX License Headers	3s
🔐 Verify Signed Commits	5s
🏗️ IaC Security Scan (Trivy config)	16s
🛡️ Security Vulnerability Scan	28s
🧪 cargo-deny (License + Advisory + Sources)	23s
🏷️ Extract Version Information	3s
🎨 Check Formatting	-1s
🧾 Validate VEX Statements	-1s
📎 Clippy	0s
🦀 Build - Linux ARM64	5m 19s
🦀 Build - Linux x86_64	5m 28s
📦 Package Deployment Manifests	0s
🧪 Test	1m 59s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	10s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	18s
🔬 Generate SLSA Provenance Subjects	5s
🏛️ Generate SLSA Provenance / detect-env	4s
🏛️ Generate SLSA Provenance / generator	21s
🏛️ Generate SLSA Provenance / final	4s
🏛️ Generate SLSA Provenance / upload-assets	-1s
🐳 Build and Push Docker Image - Distroless	1m 1s
🐳 Build and Push Docker Image - Chainguard	36s
🔭 Grype Triage Scan - Chainguard	23s
🔭 Grype Triage Scan - Distroless	21s
🔏 Attest Docker Image - Chainguard	7s
🔏 Attest Docker Image - Distroless	12s
🤖 Auto-VEX (reachability)	2m 38s
🤖 Auto-VEX (presence)	2m 32s
🧾 Assemble OpenVEX	25s
🔭 Container Security Scan - Distroless	32s
🔭 Container Security Scan - Chainguard	52s
🚀 Upload Release Assets	-1s
	24m 41s

Provide feedback