Use Rekor v2 for image attestations #318

Job	Run time
Secret Scan (Current Tree + Git History)	12s
Image Reference Consistency	5s
Sandbox OpenVEX Smoke	7m 35s
Validate YAML configs	14s
Windows Sandbox Security Qualification	23s
Go Build & Test (gpu-integrity-watch)	13s
Go Build & Test (tool-firewall)	15s
Go Build & Test (integrity-monitor)	9s
Supply Chain & SBOM Verification	18s
Hadolint & Semgrep	25s
Verify action, container, and EOL pins	12s
Release Helper Script Smoke	11s
Go Build & Test (runtime-attestor)	13s
Go Build & Test (incident-recorder)	16s
Go Build & Test (registry)	18s
Go Build & Test (ui-ingress)	51s
Documentation Validation	8s
Python Test & Lint	1m 1s
Security Regression Tests	49s
Dependency Vulnerability Audit	1m 59s
Go Build & Test (mcp-firewall)	13s
Test Count Drift Check	48s
Shell Script Lint	6s
Go Build & Test (airlock)	13s
Go Build & Test (policy-engine)	13s
Release Branch Hardened Gate	0s
	17m 20s

Navigation Menu