From 69c89a52d6944c244650bcaeb1f926670657289c Mon Sep 17 00:00:00 2001 From: Sean Wibisono Date: Mon, 13 Jul 2026 21:03:28 +1000 Subject: [PATCH] random commit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 25bd87b3d..637762a32 100644 --- a/README.md +++ b/README.md @@ -88,3 +88,4 @@ gh attestation verify oci://ghcr.io/iabtechlab/uid2-operator: --owner IABTe A successful run prints `✓ Verification succeeded!` followed by the SLSA provenance fields — including `sourceRepositoryDigest` (the source commit), `workflow.path` (the signing workflow), and the runner identity. Snapshot tags (`-SNAPSHOT` suffix) deliberately skip attestation. `gh attestation verify` returns `no attestations found` against a snapshot — that's expected. +boo 👻