jdxandClaude Opus 5.5 5d901f8ac1 ci: publish a signed packslip with each release (#2809) ...

* ci: publish a signed packslip with each release

Add a job after goreleaser that publishes a packslip.sigstore.json to
tag releases: a manifest of the release archives, the helmfile
executable in each, shell completions via `helmfile completion`, and
the skills/helmfile agent skill at the release commit, signed keylessly
with this workflow's OIDC identity and linked to build provenance.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: jdx <216188+jdx@users.noreply.github.com>

* ci: include the 386 archives in the packslip

packslip 1.4.0 reads goreleaser's 386 as i686 and leaves libc out for
static Linux builds, so every archive can be listed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: jdx <216188+jdx@users.noreply.github.com>

---------

Signed-off-by: jdx <216188+jdx@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-28 21:49:35 +08:00

..

cache.yaml

…

ci.yaml

build: update Go to 1.27.1 and modernize the codebase (#2798)

2026-09-16 13:29:02 +08:00

images.yaml

build(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2729)

2026-08-04 07:00:08 +08:00

lock.yaml

…

Makefile

chore: bump Helm to v3.22.0 and v4.3.0 (#2786)

2026-09-11 12:14:32 +08:00

releaser.yaml

ci: publish a signed packslip with each release (#2809)

2026-09-28 21:49:35 +08:00