Attestations
One entry per release. Each entry is generated from the release pipeline's own files: the sandbox re-run log, the upstream pull request, the diff against upstream, the test output, the SLSA provenance, the signature, the VEX files and our OSV record.
No release has been published yet.