sha256: pending-release-artifact
.sig / SBOM / provenance
scripts/verify-release.sh conndeck artifact.provenance.json conndeck-sbom.cdx.json
Every download row is designed to carry verification material, not just a binary link.
Replace pending hashes with release artifact values during the publish workflow.
sha256: pending-release-artifact
.sig / SBOM / provenance
scripts/verify-release.sh conndeck artifact.provenance.json conndeck-sbom.cdx.json
sha256: pending-release-artifact
.sig / SBOM / provenance
scripts/verify-release.sh conndeck artifact.provenance.json conndeck-sbom.cdx.json
sha256: pending-release-artifact
.sig / SBOM / provenance
scripts/verify-release.sh conndeck artifact.provenance.json conndeck-sbom.cdx.json