feat: upload provenance to release via a `tag-name`

[laurentsimon]

trafficstars

See https://github.com/slsa-framework/slsa-github-generator/issues/710

[laurentsimon]

@ianlewis yamlling seems to be failing. Does

Successfully installed pathspec-0.10.1 yamllint-1.26.3
Error: [trailing-spaces] trailing spaces

means it found a problem with a yaml file? Or is it failing itself?

[ianlewis]

@ianlewis yamlling seems to be failing. Does

Successfully installed pathspec-0.10.1 yamllint-1.26.3
Error: [trailing-spaces] trailing spaces

means it found a problem with a yaml file? Or is it failing itself?

The error shows up in the PR diff view. I don't think the output shows up in the log very well for some reason. It seems to omit the file name and line number. https://github.com/slsa-framework/slsa-github-generator/pull/713/files#diff-a526f8e747aef206fec2ce8469bbc904ee1a8d047bbb486743cca4e2dd5e5037R175

[asraa]

ping -- does this need another review after a merge?

[laurentsimon]

Let me get back to this PR when I'm back. It's been a while so I need to look into it. Thanks for pinging!