Add provenance steps for release (#3083)

* Add provenance steps for release * Update release workflow * Fix branch filters * Cleanup release code * Fix attestation steps * Add SBOM and disable image provenance * Disable image provenance * fix sbom install * Add sboms to goreleaser * Update SLSA version to v2.0.0 --------- Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
2024-12-09 00:41:24 +05:30
parent 7058130c3b
commit 38779b9318
5 changed files with 121 additions and 9 deletions
@@ -2,8 +2,9 @@ name: Code Scanning

 on:
  push:
-    branches-ignore:
-      - dependabot/**
+    branches:
+      - main
+      - '!dependabot/**'
  pull_request:
    branches:
      - main