fix(ci): SLSA provenance must attest pre-built release artifacts#54

Merged

williaby merged 3 commits into

mainfrom

fix/slsa-provenance-download-artifacts

May 26, 2026

Commits on May 26, 2026

fix(ci): SLSA provenance must attest pre-built release artifacts
williaby
committed
fix(ci): inline SLSA generator; org python-slsa.yml is not callable
williaby
committed
fix(ci): harden SLSA provenance workflow_dispatch trust boundary

williaby
and
claude
committed