feat: make prebuilt image updates metadata-first

488d52a

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Host trust verification on: push

Go race and vet

Native read-only (ubuntu-latest)

Native read-only (windows-latest)

Native read-only (macos-latest)

CGO-free linux/amd64

CGO-free windows/amd64

CGO-free darwin/amd64

CGO-free darwin/arm64

Linux Docker trust rotation E2E

Core runner verification on: push 2

Core runner controller

Core canary 1

Core canary 2

CodeQL on: dynamic

Analyze (actions)

Analyze (go)

Analyze (javascript-typescript)

Docker Sandboxes prebuilt images on: pull_request

Validate prebuilt publication contract without publishing

Resolve immutable upstream and publication state

Prepare protected promotion review

Build immutable ${{ matrix.platform }} package layer

Report unchanged immutable tuple

Manually promote one verified candidate digest

Verify, attest, and publish catalog state

Publish signed candidate catalog and move only authorized aliases

Host trust verification on: pull_request