Build

Initial phase 1-3 of a per-node Kata config delivery #178

Job	Run time
🔐 Verify Signed Commits	11s
⚖️ Verify SPDX License Headers	4s
🎨 Check Formatting	17s
🛡️ Security Vulnerability Scan	14s
🏗️ IaC Security Scan (Trivy config)	24s
🧾 Validate VEX Statements	6s
🧪 cargo-deny (License + Advisory + Sources)	23s
🏷️ Extract Version Information	3s
🦀 Build - Linux ARM64	4m 12s
🦀 Build - Linux x86_64	5m 44s
📦 Package Deployment Manifests	0s
📎 Clippy	49s
🧪 Test	1m 46s
✍️ Sign Binary Artifacts	-1s
🏛️ Generate SLSA Provenance	0s
🔬 Generate SLSA Provenance Subjects	-1s
🐳 Build and Push Docker Image - Chainguard	42s
🐳 Build and Push Docker Image - Distroless	41s
🔏 Attest Docker Image - Distroless	13s
🔏 Attest Docker Image - Chainguard	7s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	-1s
🤖 Auto-VEX (presence)	-1s
🔭 Container Security Scan - Distroless	29s
🧾 Assemble OpenVEX	0s
🔭 Container Security Scan - Chainguard	35s
🤖 Auto-VEX (reachability)	-1s
🚀 Upload Release Assets	0s
	16m 55s

Provide feedback