Build

Initial phase 1-3 of a per-node Kata config delivery #177

Job	Run time
⚖️ Verify SPDX License Headers	5s
🔐 Verify Signed Commits	6s
🏷️ Extract Version Information	7s
🏗️ IaC Security Scan (Trivy config)	25s
🛡️ Security Vulnerability Scan	21s
🧾 Validate VEX Statements	10s
🧪 cargo-deny (License + Advisory + Sources)	25s
🎨 Check Formatting	14s
🦀 Build - Linux ARM64	4m 43s
🦀 Build - Linux x86_64	5m 54s
📦 Package Deployment Manifests	0s
📎 Clippy	57s
🧪 Test	2m 5s
✍️ Sign Binary Artifacts	-1s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Distroless	35s
🐳 Build and Push Docker Image - Chainguard	27s
🔏 Attest Docker Image - Distroless	10s
🔏 Attest Docker Image - Chainguard	10s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	0s
🔭 Container Security Scan - Chainguard	31s
🔭 Container Security Scan - Distroless	30s
🤖 Auto-VEX (reachability)	0s
🤖 Auto-VEX (presence)	0s
🧾 Assemble OpenVEX	0s
🚀 Upload Release Assets	-1s
	17m 53s

Provide feedback