Oliver Kieselbach 9c1d0586ef ci: skip the provenance attestation on test runs of build-agent ...

A dispatch with upload_blob=false and create_release=false publishes nothing, so the
Sigstore attestation would write a permanent public transparency-log entry for bytes
nobody ever receives. The step now runs only when the run actually ships something.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-08 18:34:52 +02:00

..

assets

docs(readme): refresh screenshots, add social preview source

2026-09-03 14:50:19 +02:00

codeql

fix(security): resolve CodeQL log-forging findings and suppress by-design queries

2026-07-22 01:38:47 +02:00

ISSUE_TEMPLATE

docs(repo): AGPL-3.0 root license, MCP section in README, security policy and issue forms

2026-09-03 14:29:14 +02:00

scripts

ci: workflows authorize Azure Storage with the federated identity, not SAS secrets (D-222)

2026-09-08 17:38:14 +02:00

workflows

ci: skip the provenance attestation on test runs of build-agent

2026-09-08 18:34:52 +02:00

dependabot.yml

changed dependabot to batching

2026-09-03 13:06:38 +02:00

FUNDING.yml

Update Buy Me a Coffee username in FUNDING.yml

2026-02-24 11:55:17 +01:00