3 Commits (03aeee3df28d74f6056c0c6873b9b2a61caa2f6a)

Author	SHA1	Message	Date
Sebastian Noe	03aeee3df2	fix(ci): increase docker build timeout to 60 minutes (#7) ... Multi-platform builds with QEMU ARM emulation exceed 30 minutes for this multi-stage Dockerfile (Ruby gems + Node compilation). Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago
Sebastian Noe	12fd4d1194	fix(ci): correct SHA pins for cosign-installer and sbom-action (#6) ... - cosign-installer: use v3.9.2 (d58896d6a186...) - sbom-action: use v0.18.0 (f325610c9f50...) Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago
Sebastian Noe	1300f93d16	ci: replace Docker Hub workflow with hardened GHCR pipeline (#5) ... - Add docker-publish.yml: builds, signs (cosign), and attests images on GHCR - All actions SHA-pinned for supply chain protection - Minimal GITHUB_TOKEN permissions (deny-all default) - SBOM generation and SLSA provenance attestation - Multi-platform builds (amd64 + arm64) with GHA caching - Triggers only on *.*.*-fork* tags (pre-releases skip 'latest') - Add dependabot.yml for automated action/gem/npm updates - Remove old docker.yml (pushed to upstream's Docker Hub registry) Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago