26482651292
95%

Ran 27 May 2026 12:21AM UTC

Jobs 1

Files 89

Run time 1min

Badge

Embed ▾

Committed 27 May 2026 12:12AM UTC coverage: 94.938% (-0.02%) from 94.96%

Build # 26482651292

Build Type

push

github

Committed by

web-flow

Commit Message

ci(release): sign release tags via Sigstore gitsign (OpenSSF Silver PR 3/3) (#544)

ci(release): sign release tags via Sigstore gitsign

Install gitsign in the release-plz `release` job and configure git
to sign annotated tags via gitsign's keyless OIDC flow (matches the
existing SLSA provenance signing model). Add a "Verifying release
tags" section to docs/release-signatures.md.

Existing tags are already annotated (not lightweight) — this change
makes them signed. The signing identity is the workflow's GitHub
Actions OIDC token, attested by Fulcio and logged to Rekor.

Closes OpenSSF Best Practices Silver-tier criterion: version_tags_signed.

Signed-off-by: Sebastian Thiebaud <sebastian@prismarisk.com>

Coverage Stats

13486 of 14205 relevant lines covered (94.94%)

405366.32 hits per line

Coverage Regressions

Lines	Coverage	∆	File
2	78.49	-0.56%	crates/tsoracle-paxos-toolkit/src/lifecycle/mod.rs
1	96.14	-0.18%	crates/tsoracle-client/src/driver.rs

Jobs

ID	Job ID	Ran	Files	Coverage
1	26482651292.1	27 May 2026 12:21AM UTC	89	94.94	GitHub Action Run

prisma-risk / tsoracle / 26482651292
95%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 26482651292

prisma-risk / tsoracle / 26482651292 95%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 26482651292

prisma-risk / tsoracle / 26482651292
95%

README BADGES
x