UID2-6764: Add SLSA build provenance attestations to docker publish workflows#228

Merged

BehnamMozafari merged 15 commits into

mainfrom

bmz-UID2-6764-artifact-attestation

May 11, 2026

Commits on May 6, 2026

UID2-6764: emit SLSA provenance for non-Java docker images

BehnamMozafari
and
claude
committed
UID2-6764: grant id-token and attestations write to non-Java publish workflow
BehnamMozafari
committed
UID2-6764: emit SLSA provenance for Java docker images
BehnamMozafari
committed

Commits on May 8, 2026

UID2-6764: don't fail release on attestation error

BehnamMozafari
and
claude
committed
Revert "UID2-6764: don't fail release on attestation error"
BehnamMozafari
committed
UID2-6764: extract attest_image action; add verify step + smoke test

BehnamMozafari
and
claude
committed
UID2-6764: trigger smoke test on push to feature branch

BehnamMozafari
and
claude
committed
UID2-6764: lowercase the smoke test image ref before docker push

BehnamMozafari
and
claude
committed
UID2-6764: drop push trigger from test-attest-image now that smoke test is green

BehnamMozafari
and
claude
committed
UID2-6764: drop the smoke-test workflow now that it's served its purpose

BehnamMozafari
and
claude
committed

Commits on May 10, 2026

Update action.yaml to simplify descriptions
BehnamMozafari
authored