verify provenance

[developer-guy]

• upgrade the slsa-verifier installer action to the latest v2.1.0
• use the PROVENANCE variable in the Download Assets stage to avoid having hardcoded naming
• attestation-name is now deprecated, we should use provenance-name instead.

PTAL @jonjohnsonjr @imjasonh

[jonjohnsonjr]

Do you mind rebasing this?

[codecov-commenter]

Codecov Report

Merging #1611 (f597f08) into main (0962e29) will increase coverage by 0.55%.
The diff coverage is n/a.

❗ Current head f597f08 differs from pull request most recent head e975bb3. Consider uploading reports for the commit e975bb3 to get more accurate results

@@            Coverage Diff             @@
##             main    #1611      +/-   ##
==========================================
+ Coverage   72.28%   72.83%   +0.55%     
==========================================
  Files         119      118       -1     
  Lines        9578     9440     -138     
==========================================
- Hits         6923     6876      -47     
+ Misses       1947     1867      -80     
+ Partials      708      697      -11     

see 21 files with indirect coverage changes

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.