Mick Grove 3e0569d741 improve OpenSSF scorecard: tighten token permissions and add build provenance ... Move write permissions from workflow top-level to job-level in cflite_batch, cflite_pr, and release-docker workflows. Add sigstore build provenance attestation to the release workflow via actions/attest-build-provenance. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-26 19:36:18 -07:00
..
ISSUE_TEMPLATE	preparing for v1.12	2025-06-24 17:17:16 -07:00
requirements	openssf scorecard suggested improvements	2026-03-20 08:41:37 -07:00
workflows	improve OpenSSF scorecard: tighten token permissions and add build provenance	2026-03-26 19:36:18 -07:00
dependabot.yml	openssf scorecard suggested improvements	2026-03-19 23:39:36 -07:00