Build

Phase 1: add spotSchedule to CRD and move to v1beta1 (#82) #188

Job	Run time
⚖️ Verify SPDX License Headers	7s
🔐 Verify Signed Commits	4s
🛡️ Security Vulnerability Scan	21s
🏗️ IaC Security Scan (Trivy config)	19s
🧪 cargo-deny (License + Advisory + Sources)	20s
🧾 Validate VEX Statements	-1s
🏷️ Extract Version Information	3s
📎 Clippy	0s
🎨 Check Formatting	0s
🦀 Build - Linux ARM64	4m 49s
🦀 Build - Linux x86_64	6m 0s
📦 Package Deployment Manifests	0s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	17s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	10s
🧪 Test	2m 6s
🔬 Generate SLSA Provenance Subjects	3s
🏛️ Generate SLSA Provenance / detect-env	6s
🏛️ Generate SLSA Provenance / generator	25s
🏛️ Generate SLSA Provenance / final	2s
🏛️ Generate SLSA Provenance / upload-assets	0s
🐳 Build and Push Docker Image - Distroless	1m 1s
🐳 Build and Push Docker Image - Chainguard	41s
🔭 Grype Triage Scan - Chainguard	20s
🔭 Grype Triage Scan - Distroless	23s
🔏 Attest Docker Image - Chainguard	7s
🔏 Attest Docker Image - Distroless	11s
🤖 Auto-VEX (reachability)	3m 0s
🤖 Auto-VEX (presence)	2m 33s
🧾 Assemble OpenVEX	16s
🔭 Container Security Scan - Chainguard	27s
🔭 Container Security Scan - Distroless	26s
🚀 Upload Release Assets	-1s
	24m 35s

Provide feedback