Build

Phase 2-4: true event-driven watch, a ScheduledMachine.spec.spotSchedule reference now actually drives the machine's active/inactive decision (pull-on-reconcile) #189

Job	Run time
🔐 Verify Signed Commits	8s
⚖️ Verify SPDX License Headers	5s
🏷️ Extract Version Information	6s
🎨 Check Formatting	5s
🧾 Validate VEX Statements	5s
🛡️ Security Vulnerability Scan	14s
🧪 cargo-deny (License + Advisory + Sources)	21s
🏗️ IaC Security Scan (Trivy config)	20s
📎 Clippy	1m 14s
🦀 Build - Linux x86_64	6m 9s
🦀 Build - Linux ARM64	4m 24s
📦 Package Deployment Manifests	0s
🧪 Test	2m 9s
✍️ Sign Binary Artifacts	0s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Chainguard	34s
🐳 Build and Push Docker Image - Distroless	32s
🔏 Attest Docker Image - Chainguard	9s
🔏 Attest Docker Image - Distroless	8s
🔭 Container Security Scan - Chainguard	37s
🔭 Container Security Scan - Distroless	32s
🤖 Auto-VEX (presence)	0s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	0s
🤖 Auto-VEX (reachability)	0s
🧾 Assemble OpenVEX	0s
🚀 Upload Release Assets	-1s
	17m 51s

Provide feedback