SnapOtterandGitHub b6fdabaea8 ci(release): keep image attestations in GitHub's API, drop provenance sidecars (#504) ...

Stop pushing SLSA attestations to the registries as OCI referrer tags (attest.yml: push-to-registry: false) and disable buildx's default provenance sidecars (release.yml: provenance: false). GHCR rendered both as package versions / unknown-unknown architecture entries on the package page. The release/publish flow (publish-images gate, RELEASE_TOKEN, web Sentry DSN) is unchanged.

2026-07-12 05:02:15 +08:00

..

actions/setup

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

DISCUSSION_TEMPLATE

chore(github): redesign issue intake forms and routing

2026-06-17 14:21:18 +08:00

ISSUE_TEMPLATE

Fix stale image-only copy and add 1.x-to-2.0 migration guide (#454)

2026-07-06 15:20:19 +00:00

workflows

ci(release): keep image attestations in GitHub's API, drop provenance sidecars (#504)

2026-07-12 05:02:15 +08:00

dependabot.yml

chore(deps): pin nvidia/cuda base to 12.6.x (#449)

2026-07-06 20:18:03 +08:00

FUNDING.yml

docs: add GitHub Sponsors CTAs across README, landing, and docs

2026-05-16 19:38:12 +08:00

labels.yml

feat: add community roadmap infrastructure

2026-05-20 14:59:25 +08:00

pull_request_template.md

fix: address review issues in contribution infrastructure

2026-05-16 16:08:16 +08:00