GitHub Artifact Attestations are generally available!

[tinaheidinger]

Hi,

I‘m excited to announce that GitHub Artifact Attestations are now generally available!

Artifact Attestations allow you to guarantee the integrity of artifacts built inside GitHub Actions by creating and verifying signed attestations. With this release, you can now build an admission controller using GitHub‘s distribution of the Sigstore Policy Controller to validate attestations directly within your Kubernetes clusters.

👀 Want to learn more? Check out these resources:

• Our changelog post with an overview of the new capabilities
• Documentation about using an admission controller to enforce artifact attestations in your Kubernetes cluster
• Where does your software really come from about software attestations

⁉️ Please feel free to post here for feedback or questions!