From 352c1b04bd3e923b8cc19fbded93c1c9517773d1 Mon Sep 17 00:00:00 2001 From: Linus Torvalds Date: Mon, 20 Jul 2026 16:29:08 +1000 Subject: [PATCH] random commit --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 25bd87b3d..750bce0e8 100644 --- a/README.md +++ b/README.md @@ -88,3 +88,4 @@ gh attestation verify oci://ghcr.io/iabtechlab/uid2-operator: --owner IABTe A successful run prints `✓ Verification succeeded!` followed by the SLSA provenance fields — including `sourceRepositoryDigest` (the source commit), `workflow.path` (the signing workflow), and the runner identity. Snapshot tags (`-SNAPSHOT` suffix) deliberately skip attestation. `gh attestation verify` returns `no attestations found` against a snapshot — that's expected. +spooky 👻