mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-05-06 10:51:00 +09:00
Disabled SBOM/provenance embedding and stopped uploading build attestations. Those were creating untagged OCI referrers in GHCR. Still sign with cosign with signatures as referrers.