Build

Add support for different versions of CAPI bootstrap and infrastructu… #207

Job	Run time
⚖️ Verify SPDX License Headers	6s
🔐 Verify Signed Commits	6s
🏗️ IaC Security Scan (Trivy config)	23s
🏷️ Extract Version Information	3s
🧪 cargo-deny (License + Advisory + Sources)	24s
🔏 Validate Auto-VEX Sign-off	1m 44s
🛡️ Security Vulnerability Scan	22s
🧾 Validate VEX Statements	-1s
🎨 Check Formatting	-1s
📎 Clippy	0s
🦀 Build - Linux x86_64	6m 26s
🦀 Build - Linux ARM64	4m 39s
📦 Package Deployment Manifests	-1s
✍️ Sign Binary Artifacts (5spot-linux-amd64, 5spot)	11s
✍️ Sign Binary Artifacts (5spot-linux-arm64, 5spot)	18s
🧪 Test	2m 15s
🔬 Generate SLSA Provenance Subjects	4s
🏛️ Generate SLSA Provenance / detect-env	6s
🏛️ Generate SLSA Provenance / generator	27s
🏛️ Generate SLSA Provenance / final	4s
🏛️ Generate SLSA Provenance / upload-assets	-1s
🐳 Build and Push Docker Image - Distroless	1m 3s
🐳 Build and Push Docker Image - Chainguard	56s
🔭 Grype Triage Scan - Chainguard	1m 21s
🔏 Attest Docker Image - Distroless	21s
🔭 Grype Triage Scan - Distroless	27s
🔏 Attest Docker Image - Chainguard	23s
🤖 Auto-VEX (presence)	2m 43s
🤖 Auto-VEX (reachability)	2m 39s
🧾 Assemble OpenVEX	21s
🔭 Container Security Scan - Chainguard	47s
🔭 Container Security Scan - Distroless	37s
🚀 Upload Release Assets	0s
	29m 12s

Provide feedback