feat: workflow v0.14.1 — security-audit + provenance + GitLab auth#414

Merged

intel352 merged 7 commits into

mainfrom

feat/v0.14.1-security-audit

Apr 19, 2026

Commits on Apr 19, 2026

feat: wfctl build audit — supply-chain security checks (T34)

intel352
and
claude
committed
feat: BuildKit provenance attestation when hardened=true (T33)

intel352
and
claude
committed
feat: GitLab Container Registry provider + v0.14.1 changelog (T31)

intel352
and
claude
committed
feat: wfctl build audit — Dockerfile + builder.SecurityLint() target audit (T34)

intel352
and
claude
committed
fix(registry-gitlab): paginate, support self-managed, correct job-token header

intel352
and
claude
committed
fix: wfctl build audit — drop --security-audit alias; only count WARN in strict mode

intel352
and
claude
committed
fix: wfctl build image — gate BuildKit warning to dry-run only

intel352
and
claude
committed