Merge branch '889-publish-attestations-for-binary-release-artifacts' into 890-publish-attestations-for-release-container-images

.github/workflows/release.yml

@@ -299,7 +299,7 @@ jobs:
           ls -lAR ./automated-release-build/
 
           # create checksum file for the attestations
-          shasum --algorithm 256 ./automated-release-build/* | tee ./attestation-subject-checksums.sha256.txt
+          shasum --algorithm 256 ./automated-release-build/* | tee ./dist/attestation-subject-checksums.sha256.txt
 
           # create checksum file for the release
           cd ./automated-release-build/
@@ -308,7 +308,7 @@ jobs:
       - name: Attest Build Provenance
         uses: actions/attest-build-provenance@v2
         with:
-          subject-checksums: ./attestation-subject-checksums.sha256.txt
+          subject-checksums: ./dist/attestation-subject-checksums.sha256.txt
 
       - name: Draft Release
         uses: goreleaser/goreleaser-action@v6

.gitignore

@@ -2,7 +2,7 @@
 .idea
 .vscode
 *.db
-automated-release-build
+/automated-release-build/
 etc/dev.yml
 etc/dev-frontend.yml
 
@@ -10,7 +10,7 @@ etc/dev-frontend.yml
 node_modules/
 
 # Artifacts
-dist/
+/dist/
 
 # Generated files
 .docusaurus