What's Changed
- finish move of reusable-release to sigstore/community by @bobcallaway in #1699
- update Makefile so CodeQL covers all go files by @bobcallaway in #1700
- bump go to 1.21 by @bobcallaway in #1701
- pin container images to quiet scorecard alert by @bobcallaway in #1709
- set gh action perms by @bobcallaway in #1710
- tuf: Remove debug metadata downloads by @jku in #1717
- Fix Hashicorp Vault KMS to use PKCS1 v1.5 by @berkitamas in #1736
New Contributors
- @jku made their first contribution in #1717
- @berkitamas made their first contribution in #1736
Full Changelog: v1.8.3...v1.8.4
Contributors
jku, bobcallaway, and berkitamas