github attestations

GitHub Attestations is a security feature that allows developers to sign and verify the integrity of their build artifacts. Using the Sigstore infrastructure, it securely links built binaries back to their specific GitHub Actions workflow and source repository.