ci: GHCR commit-SHA tag, OCI labels, and build provenance #372
vouch-check-pr.yml
on: pull_request_target
check-vouch
9s
require-draft
0s