Build

Add support for different versions of CAPI bootstrap and infrastructure specs, passthrough #204

Job	Run time
🔐 Verify Signed Commits	7s
⚖️ Verify SPDX License Headers	4s
🧾 Validate VEX Statements	4s
🎨 Check Formatting	16s
🛡️ Security Vulnerability Scan	22s
🏗️ IaC Security Scan (Trivy config)	23s
🔏 Validate Auto-VEX Sign-off	1m 46s
🧪 cargo-deny (License + Advisory + Sources)	23s
🏷️ Extract Version Information	7s
📎 Clippy	0s
🦀 Build - Linux ARM64	5m 10s
🦀 Build - Linux x86_64	6m 34s
📦 Package Deployment Manifests	-1s
🧪 Test	2m 21s
✍️ Sign Binary Artifacts	0s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Distroless	30s
🐳 Build and Push Docker Image - Chainguard	24s
🔏 Attest Docker Image - Distroless	8s
🔏 Attest Docker Image - Chainguard	12s
🤖 Auto-VEX (reachability)	-1s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	-1s
🔭 Container Security Scan - Chainguard	30s
🔭 Container Security Scan - Distroless	34s
🤖 Auto-VEX (presence)	-1s
🧾 Assemble OpenVEX	-1s
🚀 Upload Release Assets	0s
	19m 50s

Provide feedback