fix(engine): verify SLSA build provenance via sigstore-verify (ADR-0020) - #339

Merged

thejefflarson merged 2 commits into

mainfrom

thejefflarson/provenance-verify-sigstore-verify

Aug 26, 2026

Commits on Aug 25, 2026

fix(engine): verify SLSA build provenance via sigstore-verify (ADR-0020)

thejefflarson
and
claude
committed
0fe53ae

Commits on Aug 26, 2026

chore(deps): bump h2 0.4.16, webbrowser 1.2.2 to clear RUSTSEC advisories

thejefflarson
and
claude
committed
d4c19a8