CodeQL

verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor #2900

Sign in to view logs

Triggered via pull request June 5, 2026 18:49

potiuk

synchronize #887

verify-trusted-download-provenance

Status Success

Total duration 1m 5s

Artifacts –

codeql-analysis.yml

on: pull_request

Matrix: Analyze