ci: fix attest job for multi-arch rock, drop SBOM/scan - #85

Open

tonyandrewmeyer wants to merge 7 commits into

canonical:masterfrom

tonyandrewmeyer:test-attest-fix

Commits on Jul 16, 2026

test: attest-and-scan per-arch fix + drop fork-only secret
tonyandrewmeyer
committed
f8f8f9b
test: glob per-arch rock and resolve filename dynamically
tonyandrewmeyer
committed
cf984de
test: dump grype findings as table
tonyandrewmeyer
committed
64fd773
test: pin grype distro to ubuntu:24.04 (rock is chiselled)
tonyandrewmeyer
committed
38870c3
test: checkout repo so .grype.yaml is picked up; only fail on fixed CVEs
tonyandrewmeyer
committed
25078c8
test: drop syft/grype/SBOM attestation; keep only build-provenance
tonyandrewmeyer
committed
ea7be3b
Merge branch 'master' into test-attest-fix
tonyandrewmeyer
authored
3402e08