Support GitHub Artifact Attestations

[chenrui333]

GitHub has launched Artifact Attestations built on sigstore to sign artifacts built using GitHub Actions. Generally this should help provide consumers more trust around our artifact process.

• https://github.blog/changelog/2024-06-25-artifact-attestations-is-generally-available/

[bmbeverst]

Good day, would like to express my interested in this being implemented.

The issues doesn't seem to follow the template. Perhaps it would get more attention if it followed that template?

[chenrui333]

@bmbeverst 👋 yeah, it was kind of intentional that the issue was not created via the template as it is more descriptive and concise. (maybe I missed the community engagement part)

anyway, it is implemented via #5158