GitHub Actions: prove artifact provenance before production deployment
A production runbook for tying commit, workflow, digest, attestation, approval and Azure identity together before promoting a GitHub Actions artifact.
Read article
Tag
attestation
1 article connected to this technical signal.