Build

Phase 0 of the new SpotSchedule feature: ADR and CALM diagram update.… #185

Job	Run time
⚖️ Verify SPDX License Headers	5s
🔐 Verify Signed Commits	6s
🏗️ IaC Security Scan (Trivy config)	19s
🧪 cargo-deny (License + Advisory + Sources)	23s
🛡️ Security Vulnerability Scan	13s
🏷️ Extract Version Information	6s
🎨 Check Formatting	0s
📎 Clippy	0s
🧾 Validate VEX Statements	0s
🦀 Build - Linux x86_64	5m 44s
🦀 Build - Linux ARM64	4m 7s
📦 Package Deployment Manifests	-1s
🧪 Test	1m 48s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	17s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	17s
🔬 Generate SLSA Provenance Subjects	3s
🏛️ Generate SLSA Provenance / detect-env	4s
🏛️ Generate SLSA Provenance / generator	18s
🏛️ Generate SLSA Provenance / final	3s
🏛️ Generate SLSA Provenance / upload-assets	0s
🐳 Build and Push Docker Image - Distroless	1m 1s
🐳 Build and Push Docker Image - Chainguard	42s
🔭 Grype Triage Scan - Chainguard	19s
🔏 Attest Docker Image - Distroless	12s
🔭 Grype Triage Scan - Distroless	17s
🔏 Attest Docker Image - Chainguard	7s
🤖 Auto-VEX (presence)	2m 38s
🤖 Auto-VEX (reachability)	2m 38s
🧾 Assemble OpenVEX	26s
🔭 Container Security Scan - Distroless	36s
🔭 Container Security Scan - Chainguard	35s
🚀 Upload Release Assets	-1s
	23m 22s

Provide feedback