mirror of
https://github.com/mwisnowski/mtg_python_deckbuilder.git
synced 2026-04-04 20:27:16 +02:00
669 B
669 B
MTG Python Deckbuilder v4.5.3
Added
- SBOM & supply chain provenance: Every tagged release now attaches source SBOMs (SPDX + CycloneDX JSON) for Python dependencies and a CycloneDX container image SBOM to the GitHub Release assets. Build provenance attestations (SLSA-style) are published for the multi-arch Docker image via the GitHub Attestations API.
provenance: mode=maxis enabled on all arch builds.
Verifying attestations
gh attestation verify oci://docker.io/mwisnowski/mtg-python-deckbuilder:latest \
--repo mwisnowski/mtg_python_deckbuilder
Inspecting an SBOM
syft convert sbom-source.cyclonedx.json -o table