CI/CD components to generate and verify provenance attestation (via jbeckford) — discussion
#security
