Build

ci(deps): bump firestoned/github-actions/security/verify-signed-commits from 1.3.6 to 1.3.7 #255

Job	Run time
⚖️ Verify SPDX License Headers	27s
🔐 Verify Signed Commits	21s
🛡️ Security Vulnerability Scan	30s
🔏 Validate Auto-VEX Sign-off	2m 9s
🧾 Validate VEX Statements	12s
🏗️ IaC Security Scan (Trivy config)	29s
🎨 Check Formatting	14s
🏷️ Extract Version Information	11s
🧪 cargo-deny (License + Advisory + Sources)	38s
🦀 Build - Linux ARM64	6m 56s
🦀 Build - Linux x86_64	6m 46s
📦 Package Deployment Manifests	-1s
📎 Clippy	1m 45s
🧪 Test	2m 42s
✍️ Sign Binary Artifacts	-1s
🔬 Generate SLSA Provenance Subjects	0s
🏛️ Generate SLSA Provenance	0s
🐳 Build and Push Docker Image - Chainguard	44s
🐳 Build and Push Docker Image - Distroless	30s
🔏 Attest Docker Image - Chainguard	17s
🔏 Attest Docker Image - Distroless	15s
🔭 Container Security Scan - Distroless	47s
🔭 Container Security Scan - Chainguard	35s
🔭 Grype Triage Scan - ${{ matrix.variant.name }}	0s
🤖 Auto-VEX (reachability)	0s
🤖 Auto-VEX (presence)	0s
🧾 Assemble OpenVEX	0s
🚀 Upload Release Assets	-1s
	26m 25s

Provide feedback