✨ support for SLSA provenance in Signed-Release

[laurentsimon]

Search for .intoto.jsonl in the release check.

Search for `.intoto.jsonl` in the release check.

[codecov]

Codecov Report

Merging #2131 (ab8b2a8) into main (2fa6bc2) will increase coverage by 0.08%.
The diff coverage is n/a.

❗ Current head ab8b2a8 differs from pull request most recent head a1c8aef. Consider uploading reports for the commit a1c8aef to get more accurate results

@@            Coverage Diff             @@
##             main    #2131      +/-   ##
==========================================
+ Coverage   42.71%   42.79%   +0.08%     
==========================================
  Files          93       93              
  Lines        7712     7695      -17     
==========================================
- Hits         3294     3293       -1     
+ Misses       4162     4146      -16     
  Partials      256      256              

[github-actions]

Integration tests success for
[de5af81]
(https://github.com/ossf/scorecard/actions/runs/2820569222)

[github-actions]

Integration tests success for
[99cc937]
(https://github.com/ossf/scorecard/actions/runs/2820604190)

[github-actions]

Integration tests success for
[f435b4c]
(https://github.com/ossf/scorecard/actions/runs/2829989268)

[github-actions]

Integration tests success for
[fa48014]
(https://github.com/ossf/scorecard/actions/runs/2829997634)

[github-actions]

Integration tests success for
[a1c8aef]
(https://github.com/ossf/scorecard/actions/runs/2837329549)