forgejo-mcp/docs
Christoph Görn 3125eec711
feat: ✨ enable Tekton Chains SLSA v1.0 provenance for release-tools image
- add chains.tekton.dev/transparency-upload annotation to publish PipelineRun
- propagate IMAGE_URL + IMAGE_DIGEST as pipeline-level results for Chains binding
- add IMAGE_URL result to push-image-by-digest task (required for image→provenance bind)
- document cosign verify-attestation --type slsaprovenance in README
- update ADR (release-pipeline-migration.md) with Chains addendum; remove from out-of-scope

Closes forgejo-mcp-46j
2026-05-26 15:06:35 +02:00
..
design feat: ✨ enable Tekton Chains SLSA v1.0 provenance for release-tools image 2026-05-26 15:06:35 +02:00
plans chore: 🔥 remove stale secrets/ + point at op1st-emea-b4mad as normative cosign pub 2026-05-25 13:35:31 +02:00