pdns-api-cage v0.1.0 * ci: delete the sha-<commit> scaffolding tag once the release is published (40cf236) * ci: publish the image as :X.Y.Z, without the git tag's leading v (58020ab) * ci: match scanner findings on any identifier, and assert the key shape (192de44) * ci: fail on openvex statements that match nothing in the SBOM (76bbb47) * ci: retry signature verification and drop osv-scanner (793564b) * ci: use cosign v3 bundle format for blob signing (74b7916) * ci: derive the SBOM guard from the binary, not the Go toolchain (76d2788) * ci: fix release tag verification and run scanners from a pinned toolchain (32f223f) * Initial commit (e06c90d)