mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-03-18 12:13:37 +09:00
Disabled SBOM/provenance embedding and stopped uploading build attestations. Those were creating untagged OCI referrers in GHCR. Still sign with cosign with signatures as referrers.