3 people a20d60bf12 ci: bump docker workflow actions and add SBOM attestations (#2639) ...

Bump Docker CI action majors across docker-latest.yml, docker-release.yml, and docker-test.yml:
actions/checkout v3 → v7
docker/setup-qemu-action / setup-buildx-action / login-action v3 → v4
docker/build-push-action v5 → pinned v7.3.0 (53b7df96c91f9c12dcc8a07bcb9ccacbed38856a)
Attach SBOM attestations (sbom: true) and pin provenance (provenance: mode=max) on image pushes (:latest and release tags).
Disable provenance on PR test builds (push: false), where registry attestations are not applicable.

---------

Co-authored-by: Ajin Abraham <[email protected]>
Co-authored-by: Cursor <[email protected]>

2026-08-09 17:10:24 -07:00

..

ISSUE_TEMPLATE

[HOTFIX] Update Slack Join Link (#2556)

2025-09-30 10:54:10 -07:00

workflows

ci: bump docker workflow actions and add SBOM attestations (#2639)

2026-08-09 17:10:24 -07:00

CODE_OF_CONDUCT.md

move coc

2017-07-29 13:30:26 +05:30

codeql-config.yml

4.2.0 (#2450)

2024-11-17 22:26:06 -08:00

CONTRIBUTING.md

[HOTFIX] Update Slack Join Link (#2556)

2025-09-30 10:54:10 -07:00

FUNDING.yml

Hotfix: Dependency bump + Link update

2021-05-10 18:30:51 -07:00

PULL_REQUEST_TEMPLATE.md

Migrate from Travis to Github Actions (#1630)

2020-12-27 19:05:20 -05:00

SECURITY.md

[HOTFIX][Security] Security Updates July 5 2026 (#2627)

2026-07-05 16:55:49 -07:00

SUPPORT.md

[HOTFIX] Update Slack Join Link (#2556)

2025-09-30 10:54:10 -07:00