Changelog
- 45c380c: chore(community): Discussions link, starter issues, AGENTS.md maintainer reframe (AD-8) (#114) (@Reederey87)
- 7d81415: feat(ci): make the spec-drift/work-log gate advisory on fork PRs (AD-8) (#116) (@Reederey87)
- b4a684d: feat(release): SLSA v1 build provenance for release artifacts (P4-SEC-05 / P4-QUAL-05) (#117) (@Reederey87)
- 987c8e7: feat(release): cosign keyless signing + per-archive SBOMs (P4-SEC-05 / P4-QUAL-05) (#115) (@Reederey87)
- eb73e94: feat(release): dormant Apple notarization config + enrollment runbook (P4-SEC-05 remainder) (#119) (@Reederey87)
Built with GoReleaser. Verify downloads against checksums.txt, or install via
brew install Reederey87/devstrap/devstrap or the scripts/install.sh one-liner.
checksums.txt is keylessly signed with cosign (Fulcio cert + Rekor log) and every
archive ships an SPDX SBOM — see "Verify a download" in the README.
Contributors
Reederey87