Merge pull request #165 from smlx/update-rules

feat: update rules to the new format

Merge pull request #164 from smlx/variables

fix: use variable instead of hard-coded repo name

Merge pull request #162 from smlx/attestv3

fix: use the right output variable

Merge pull request #161 from smlx/attestv2

fix: avoid internal goreleaser cosign

Merge pull request #160 from smlx/attest

feat: add artifact attestation to releases

Merge pull request #159 from smlx/native-signing

fix: debug goreleaser action output

Merge pull request #143 from smlx/update-ci

feat: update dependabot configuration

Merge pull request #140 from smlx/explicit-gitignore

fix: explicitly gitignore the temporary sbom file

Merge pull request #139 from smlx/fix-syntax

fix: yaml / bash syntax

Merge pull request #138 from smlx/dist-hide

dist hide