Ville Skyttä
Ville Skyttä
Info about artifact attestations: https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations Sample results in my fork: https://github.com/scop/ssh-inscribe/attestations
Refs - https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns - https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#cooldown- - https://docs.zizmor.sh/audits/#dependabot-cooldown
For SLSA level 3. Refs - https://docs.github.com/en/actions/how-tos/secure-your-work/use-artifact-attestations/increase-security-rating - https://github.blog/enterprise-software/devsecops/enhance-build-security-and-reach-slsa-level-3-with-github-artifact-attestations/#achieving-slsa-level-3-compliance-with-github-artifact-attestations Closes https://github.com/UpCloudLtd/upcloud-cli/issues/426
**Environment (required):** - OS: [e.g. macOS (Darwin or M1), Linux, Windows] Linux - Version [e.g. 1.2.0, "upctl version" gives you this] 3.16.1 **Describe the bug** `upctl account token delete THING`...