@vibecontrols/vibe-plugin-security-package-publish
v2026.528.5
Published
Cosign signing + SLSA provenance for the package.publish lifecycle stage. Signs the published artifact (keyless via Fulcio OIDC when available, or with input.config.cosignKey for key-based) and emits an intoto+json SLSA provenance document. Registers as a
Downloads
649
