Martijn Pieters 47f80a62c4 Sign docker images using cosign (#8685) ...

cosign uses the GitHub action ID token to retrieve an ephemeral code
signing certificate from Fulcio, and store the signature in the Rekor
transparency log.

Once an image has been successfully signed, you should be able to verify
the signature with:

```sh
cosign verify ghcr.io/astral-sh/uv:latest --certificate-identity-regexp='.*' --certificate-oidc-issuer-regexp='.*'
```

Closes #8670

2025-01-31 09:00:23 -06:00

..

build-binaries.yml

Update name of "Build binary" job to highlight that these are the "release" binaries (#10990)

2025-01-27 11:48:38 -06:00

build-docker.yml

Sign docker images using cosign (#8685)

2025-01-31 09:00:23 -06:00

ci.yml

Include Rust toolchain in cache in trampoline test job (#11019)

2025-01-28 14:26:07 +00:00

publish-docs.yml

Use the docs bot email for docs publish commits (#5369)

2024-07-23 16:04:12 -05:00

publish-pypi.yml

Update astral-sh/setup-uv action to v5 (#10116)

2024-12-23 08:47:58 -05:00

release.yml

Sign docker images using cosign (#8685)

2025-01-31 09:00:23 -06:00

setup-dev-drive.ps1

Only move the .cargo directory if it exists (#10938)

2025-01-24 15:39:29 +00:00

sync-python-releases.yml

Update astral-sh/setup-uv action to v5 (#10116)

2024-12-23 08:47:58 -05:00