Tanmay Jain 0211ed7d4c feat(provenance): add SLSA provenance and attestation signing libraries ...

Add internal/provenance for deriving in-toto subjects from Packer
artifacts, building SLSA Provenance v1 predicates, wrapping in-toto
statements, and best-effort git/CI source detection.

Add internal/attestation for DSSE envelope handling and a pluggable
Signer/Verifier backend supporting key (local PEM), kms (aws/gcp/
azure/hashivault), and keyless (Sigstore Fulcio) modes, plus Sigstore
bundle handling and DSSE/policy verification.

Add the supporting module dependencies in go.mod/go.sum.

2026-07-14 15:07:02 +05:30

..

attestation

feat(provenance): add SLSA provenance and attestation signing libraries

2026-07-14 15:07:02 +05:30

dag

Merge pull request #13632 from hashicorp/compliance/add-headers

2026-06-03 14:37:46 +05:30

hcp

Merge pull request #13632 from hashicorp/compliance/add-headers

2026-06-03 14:37:46 +05:30

provenance

feat(provenance): add SLSA provenance and attestation signing libraries

2026-07-14 15:07:02 +05:30

sbom

fix: update build constraints to support arm architecture on FreeBSD (#13650)

2026-06-03 16:52:34 +05:30