Merge pull request #938 from crazy-max/bake-def-envs

buildx(bake): merge existing env vars when parsing definition
2026-01-14 14:03:57 +01:00 · 2026-01-14 13:51:42 +01:00 · 2026-01-14 12:59:10 +01:00 · 2026-01-14 12:23:11 +01:00 · 2026-01-14 12:01:47 +01:00 · 2026-01-14 11:49:45 +01:00
66 changed files with 5096 additions and 3401 deletions
--- a/.eslintignore
+++ b/.eslintignore
@@ -1,4 +0,0 @@
-/.yarn/**
-/lib/**
-/coverage/**
-/node_modules/**
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -1,36 +0,0 @@
-{
-  "env": {
-    "node": true,
-    "es6": true,
-    "mocha": true,
-    "jest": true
-  },
-  "extends": [
-    "eslint:recommended",
-    "plugin:@typescript-eslint/eslint-recommended",
-    "plugin:@typescript-eslint/recommended",
-    "plugin:import/errors",
-    "plugin:import/typescript", // this is needed to allow importing typescript files from JS
-    "plugin:import/warnings",
-    "plugin:jest/recommended",
-    "plugin:prettier/recommended"
-  ],
-  "parser": "@typescript-eslint/parser",
-  "parserOptions": {
-    "ecmaVersion": 2023,
-    "sourceType": "module"
-  },
-  "plugins": [
-    "@typescript-eslint",
-    "jest",
-    "prettier"
-  ],
-  "rules": {
-    "import/no-unresolved": [
-      "error", {
-        "ignore": ["csv-parse/sync", "@octokit/openapi-types"]
-      }
-    ],
-    "jest/no-disabled-tests": 0
-  }
-}
--- a/.github/actions/macos-setup-qemu/action.yml
+++ b/.github/actions/macos-setup-qemu/action.yml
@@ -1,17 +0,0 @@
-name: 'Setup QEMU on macOS'
-description: 'Set up QEMU on macOS runners'
-
-# FIXME: Remove this composite once QEMU issue is fixed on macOS runners
-#  https://github.com/docker/actions-toolkit/issues/455
-
-runs:
-  using: composite
-  steps:
-    - run: |
-        set -ex
-        brew uninstall --ignore-dependencies qemu || true
-        brew autoremove || true
-        curl -o /tmp/qemu.rb https://raw.githubusercontent.com/Homebrew/homebrew-core/f1a9cf104a9a51779c7a532b658c490f69974839/Formula/q/qemu.rb
-        brew install /tmp/qemu.rb
-      continue-on-error: true
-      shell: bash
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -1,120 +1,238 @@
 {
  "latest": {
-    "id": 234386442,
-    "tag_name": "v0.26.1-desktop.1",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.26.1-desktop.1",
+    "id": 269523829,
+    "tag_name": "v0.30.1-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.2",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/buildx-v0.26.1-desktop.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.26.1-desktop.1/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/checksums.txt"
+    ]
+  },
+  "v0.30.1-desktop.2": {
+    "id": 269523829,
+    "tag_name": "v0.30.1-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/checksums.txt"
+    ]
+  },
+  "v0.30.1-desktop.1": {
+    "id": 264746294,
+    "tag_name": "v0.30.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/buildx-v0.30.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.1/checksums.txt"
    ]
  },
  "edge": {
-    "id": 245038026,
-    "tag_name": "v0.28.0-desktop.1",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.28.0-desktop.1",
+    "id": 269523829,
+    "tag_name": "v0.30.1-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.30.1-desktop.2",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/buildx-v0.28.0-desktop.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.28.0-desktop.1/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/buildx-v0.30.1-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.30.1-desktop.2/checksums.txt"
    ]
  },
  "v0.28.0-desktop.1": {
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,61 +1,356 @@
 {
  "latest": {
-    "id": 251985372,
-    "tag_name": "v0.29.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.29.1",
+    "id": 263040986,
+    "tag_name": "v0.30.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.1",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/checksums.txt"
+    ]
+  },
+  "v0.30.1": {
+    "id": 263040986,
+    "tag_name": "v0.30.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/checksums.txt"
+    ]
+  },
+  "v0.30.0": {
+    "id": 261889955,
+    "tag_name": "v0.30.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/buildx-v0.30.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0/checksums.txt"
+    ]
+  },
+  "edge": {
+    "id": 263040986,
+    "tag_name": "v0.30.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.1/checksums.txt"
+    ]
+  },
+  "v0.30.0-rc2": {
+    "id": 261580981,
+    "tag_name": "v0.30.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/buildx-v0.30.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.30.0-rc1": {
+    "id": 260429826,
+    "tag_name": "v0.30.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/buildx-v0.30.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.30.0-rc1/checksums.txt"
    ]
  },
  "v0.29.1": {
@@ -176,65 +471,6 @@
      "https://github.com/docker/buildx/releases/download/v0.29.0/checksums.txt"
    ]
  },
-  "edge": {
-    "id": 251985372,
-    "tag_name": "v0.29.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.29.1",
-    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/buildx-v0.29.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.29.1/checksums.txt"
-    ]
-  },
  "v0.29.0-rc1": {
    "id": 249510086,
    "tag_name": "v0.29.0-rc1",
--- a/.github/compose-releases.json
+++ b/.github/compose-releases.json
@@ -1,54 +1,314 @@
 {
  "latest": {
-    "id": 258406598,
-    "tag_name": "v2.40.3",
-    "html_url": "https://github.com/docker/compose/releases/tag/v2.40.3",
+    "id": 271392988,
+    "tag_name": "v5.0.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v2.40.3/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.sbom.json"
+      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.1": {
+    "id": 271392988,
+    "tag_name": "v5.0.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.0": {
+    "id": 266660722,
+    "tag_name": "v5.0.0",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "edge": {
+    "id": 271392988,
+    "tag_name": "v5.0.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.0-rc.2": {
+    "id": 262026717,
+    "tag_name": "v5.0.0-rc.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0-rc.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.2/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.0-rc.1": {
+    "id": 261813085,
+    "tag_name": "v5.0.0-rc.1",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.0-rc.1",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.0-rc.1/docker-compose-windows-x86_64.sbom.json"
    ]
  },
  "v2.40.3": {
@@ -2396,58 +2656,6 @@
      "https://github.com/docker/compose/releases/download/v2.24.0/docker-compose-windows-x86_64.exe.sha256"
    ]
  },
-  "edge": {
-    "id": 258406598,
-    "tag_name": "v2.40.3",
-    "html_url": "https://github.com/docker/compose/releases/tag/v2.40.3",
-    "assets": [
-      "https://github.com/docker/compose/releases/download/v2.40.3/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v2.40.3/docker-compose-windows-x86_64.sbom.json"
-    ]
-  },
  "v2.24.0-birthday.10": {
    "id": 133417636,
    "tag_name": "v2.24.0-birthday.10",
--- a/.github/cosign-releases.json
+++ b/.github/cosign-releases.json
@@ -1,92 +1,392 @@
 {
  "latest": {
-    "id": 253720294,
-    "tag_name": "v3.0.2",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.2",
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64_3.0.2_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64_3.0.2_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm_3.0.2_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le_3.0.2_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64_3.0.2_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x_3.0.2_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe_3.0.2_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
+    ]
+  },
+  "v3.0.4": {
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
+    ]
+  },
+  "v2.6.2": {
+    "id": 275620649,
+    "tag_name": "v2.6.2",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v2.6.2",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64_2.6.2_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64_2.6.2_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm_2.6.2_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le_2.6.2_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64_2.6.2_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x_2.6.2_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe_2.6.2_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/release-cosign.pub"
+    ]
+  },
+  "v3.0.3": {
+    "id": 268935494,
+    "tag_name": "v3.0.3",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.3",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64_3.0.3_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64_3.0.3_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64_3.0.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64_3.0.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm_3.0.3_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64_3.0.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64_3.0.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le_3.0.3_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64_3.0.3_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x_3.0.3_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe_3.0.3_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.3/release-cosign.pub"
    ]
  },
  "v3.0.2": {
@@ -3106,93 +3406,93 @@
    ]
  },
  "edge": {
-    "id": 253720294,
-    "tag_name": "v3.0.2",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.2",
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-3.0.2-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-amd64_3.0.2_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-darwin-arm64_3.0.2_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-arm_3.0.2_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-amd64_3.0.2_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-pivkey-pkcs11key-arm64_3.0.2_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-ppc64le_3.0.2_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-riscv64_3.0.2_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-s390x_3.0.2_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe_3.0.2_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_3.0.2_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.2/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
    ]
  },
  "v2.0.0-rc.3": {
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,7 @@
 version: 2
 updates:
  - package-ecosystem: "github-actions"
+    open-pull-requests-limit: 20
    directory: "/"
    schedule:
      interval: "daily"
@@ -8,6 +9,7 @@ updates:
      - "dependencies"
      - "bot"
  - package-ecosystem: "npm"
+    open-pull-requests-limit: 20
    directory: "/"
    schedule:
      interval: "daily"
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,14 +1,98 @@
 {
  "latest": {
-    "id": 252833798,
-    "tag_name": "v28.5.1",
-    "html_url": "https://github.com/moby/moby/releases/tag/v28.5.1",
+    "id": 275290406,
+    "tag_name": "docker-v29.1.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.4",
+    "assets": []
+  },
+  "v29.1.4": {
+    "id": 275290406,
+    "tag_name": "docker-v29.1.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.4",
    "assets": []
  },
  "edge": {
-    "id": 258289954,
-    "tag_name": "docker-v29.0.0-rc.2",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0-rc.2",
+    "id": 271147963,
+    "tag_name": "docker-v29.2.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.1",
+    "assets": []
+  },
+  "v29.2.0-rc.1": {
+    "id": 271147963,
+    "tag_name": "docker-v29.2.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.1",
+    "assets": []
+  },
+  "v29.1.3": {
+    "id": 269884470,
+    "tag_name": "docker-v29.1.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.3",
+    "assets": []
+  },
+  "v29.1.2": {
+    "id": 266898070,
+    "tag_name": "docker-v29.1.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.2",
+    "assets": []
+  },
+  "v29.1.1": {
+    "id": 265971746,
+    "tag_name": "docker-v29.1.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.1",
+    "assets": []
+  },
+  "v29.1.0": {
+    "id": 265770897,
+    "tag_name": "docker-v29.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.0",
+    "assets": []
+  },
+  "v29.0.4": {
+    "id": 264940208,
+    "tag_name": "docker-v29.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.4",
+    "assets": []
+  },
+  "v29.0.3": {
+    "id": 264058657,
+    "tag_name": "docker-v29.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.3",
+    "assets": []
+  },
+  "v29.0.2": {
+    "id": 262951416,
+    "tag_name": "docker-v29.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.2",
+    "assets": []
+  },
+  "v29.1.0-rc.1": {
+    "id": 263125085,
+    "tag_name": "docker-v29.1.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.0-rc.1",
+    "assets": []
+  },
+  "v29.0.1": {
+    "id": 262245944,
+    "tag_name": "docker-v29.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.1",
+    "assets": []
+  },
+  "v29.0.0": {
+    "id": 261265152,
+    "tag_name": "docker-v29.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0",
+    "assets": []
+  },
+  "v29.0.0-rc.3": {
+    "id": 260452080,
+    "tag_name": "docker-v29.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.0.0-rc.3",
+    "assets": []
+  },
+  "v28.5.2": {
+    "id": 259852183,
+    "tag_name": "v28.5.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v28.5.2",
    "assets": []
  },
  "v29.0.0-rc.2": {
--- a/.github/regclient-releases.json
+++ b/.github/regclient-releases.json
@@ -1,31 +1,136 @@
 {
  "latest": {
-    "id": 243486094,
-    "tag_name": "v0.9.2",
-    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.9.2",
+    "id": 268115419,
+    "tag_name": "v0.11.1",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.1",
    "assets": [
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/metadata.tgz",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regbot-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regctl-windows-amd64.exe",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-darwin-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-darwin-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-amd64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-arm64",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-ppc64le",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-linux-s390x",
-      "https://github.com/regclient/regclient/releases/download/v0.9.2/regsync-windows-amd64.exe"
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.1": {
+    "id": 268115419,
+    "tag_name": "v0.11.1",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.1",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.1/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.11.0": {
+    "id": 266508831,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.11.0",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-freebsd-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-riscv64",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.11.0/regsync-windows-amd64.exe"
+    ]
+  },
+  "v0.10.0": {
+    "id": 260956263,
+    "tag_name": "v0.10.0",
+    "html_url": "https://github.com/regclient/regclient/releases/tag/v0.10.0",
+    "assets": [
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/metadata.tgz",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regbot-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regctl-windows-amd64.exe",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-darwin-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-darwin-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-amd64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-arm64",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-ppc64le",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-linux-s390x",
+      "https://github.com/regclient/regclient/releases/download/v0.10.0/regsync-windows-amd64.exe"
    ]
  },
  "v0.9.2": {
--- a/.github/undock-releases.json
+++ b/.github/undock-releases.json
@@ -1,46 +1,90 @@
 {
  "latest": {
-    "id": 213293369,
-    "tag_name": "v0.10.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.10.0",
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
+    ]
+  },
+  "v0.11.0": {
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
+    "assets": [
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
    ]
  },
  "v0.10.0": {
@@ -197,47 +241,47 @@
    ]
  },
  "edge": {
-    "id": 213293369,
-    "tag_name": "v0.10.0",
-    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.10.0",
+    "id": 273439938,
+    "tag_name": "v0.11.0",
+    "html_url": "https://github.com/crazy-max/undock/releases/tag/v0.11.0",
    "assets": [
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/checksums.txt",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_darwin_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_amd64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_arm64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv5.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv6.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_armv7.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_ppc64le.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_riscv64.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_linux_s390x.tar.gz",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_amd64.zip",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.provenance.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.sbom.json",
-      "https://github.com/crazy-max/undock/releases/download/v0.10.0/undock_0.10.0_windows_arm64.zip"
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/checksums.txt",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_darwin_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_amd64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_arm64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv5.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv6.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_armv7.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_ppc64le.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_riscv64.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_linux_s390x.tar.gz",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_amd64.zip",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.provenance.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.sbom.json",
+      "https://github.com/crazy-max/undock/releases/download/v0.11.0/undock_0.11.0_windows_arm64.zip"
    ]
  },
  "v0.7.0-rc.1": {
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: buildx-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: buildx-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Enable corepack
        run: |
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/compose-desktop
      artifact_name: compose-lab-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: compose-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/compose-lab-releases-json
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: docker/compose
      artifact_name: compose-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: compose-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/compose-releases-json
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: sigstore/cosign
      artifact_name: cosign-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: cosign-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/cosign-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -17,12 +17,14 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
      filename: docker-releases.json
-      tag_pattern: '^docker-(.*)$'
+      tag_patterns: |
+        ^docker-(.*)$
+        ^(v.*)$
    secrets: inherit

  open-pr:
@@ -33,10 +35,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: docker-releases-json
          path: .github
@@ -46,7 +48,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,9 @@
 name: publish

+permissions:
+  id-token: write # required for OIDC
+  contents: write # required to create GitHub Release
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
@@ -9,17 +13,49 @@ on:
    tags:
      - 'v*'

+env:
+  NODE_VERSION: "24" # at least Node 24 is required for Trusted Publishing with OIDC
+
 jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        name: Checkout
+        uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'yarn'
+          package-manager-cache: false
+      -
+        name: Print versions
+        run: |
+          node --version
+          npm --version
+          yarn --version
+      -
+        name: Build
+        run: |
+          yarn install
+          yarn run build
      -
        name: Publish
-        uses: docker/bake-action@v6
+        run: |
+          npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
+          npm publish --provenance --access public
+      -
+        name: Create Release
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # v2.5.0
        with:
-          targets: publish
+          draft: true
+          generate_release_notes: true
        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: regclient/regclient
      artifact_name: regclient-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: regclient-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/regclient-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -16,7 +16,7 @@ on:
 env:
  NODE_VERSION: "20"
  BUILDX_VERSION: "edge"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.25.0"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.26.3"

 jobs:
  test:
@@ -34,7 +34,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Test
        uses: docker/bake-action@v6
@@ -69,7 +69,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Enable corepack
        run: |
@@ -149,10 +149,11 @@ jobs:
    permissions:
      contents: read
      id-token: write # needed for signing with GitHub OIDC Token
+      packages: write # needed for pushing to GitHub Container Registry
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Expose GitHub Runtime
        uses: crazy-max/ghaction-github-runtime@v3
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -17,7 +17,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@34fd436075cac6431d2036d5f6f1c3f3d4687ac5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
    with:
      repository: crazy-max/undock
      artifact_name: undock-releases-json
@@ -32,10 +32,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: Download
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
        with:
          name: undock-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e  # v7.0.8
+        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
        with:
          base: main
          branch: bot/undock-releases-json
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -21,7 +21,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
      -
        name: List targets
        id: generate
--- a/tests/.fixtures/imagetools-06.json
+++ b/tests/.fixtures/imagetools-06.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType":"application/vnd.oci.image.manifest.v1+json",
+    "digest":"sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2",
+    "size":1113,
+    "annotations":{
+      "vnd.docker.reference.digest":"sha256:dccc69dd895968c4f21aa9e43e715f25f0cedfce4b17f1014c88c307928e22fc",
+      "vnd.docker.reference.type":"attestation-manifest"
+    },
+    "platform":{
+      "architecture":"unknown",
+      "os":"unknown"
+    }
+  }
+]
--- a/tests/.fixtures/imagetools-07.json
+++ b/tests/.fixtures/imagetools-07.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType": "application/vnd.oci.image.manifest.v1+json",
+    "digest": "sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03",
+    "size": 1113,
+    "annotations": {
+      "vnd.docker.reference.digest": "sha256:1b6bce668653f08e2d0f9f7c9b646675b2cbce94ce8abdf4eb0eabaef4353045",
+      "vnd.docker.reference.type": "attestation-manifest"
+    },
+    "platform": {
+      "architecture": "unknown",
+      "os": "unknown"
+    }
+  }
+]
--- a/tests/buildx/bake.test.ts
+++ b/tests/buildx/bake.test.ts
@@ -485,3 +485,113 @@ describe('hasGitAuthTokenSecret', () => {
    expect(Bake.hasGitAuthTokenSecret(def)).toEqual(expected);
  });
 });
+
+describe('hasProvenanceAttestation', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              },
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasProvenanceAttestation(def)).toEqual(expected);
+  });
+});
+
+describe('hasSBOMAttestation', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "attest": [
+              {
+                "type": "sbom"
+              },
+              {
+                "type": "provenance",
+                "mode": "max"
+              }
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasSBOMAttestation(def)).toEqual(expected);
+  });
+});
--- a/tests/buildx/builder.test.ts
+++ b/tests/buildx/builder.test.ts
@@ -49,7 +49,6 @@ describe('exists', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    const builder = new Builder();
    await builder.exists('foo');
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'inspect', 'foo'], {
      silent: true,
      ignoreReturnCode: true
--- a/tests/buildx/buildx.test.ts
+++ b/tests/buildx/buildx.test.ts
@@ -91,7 +91,6 @@ describe('isAvailable', () => {
      standalone: false
    });
    await buildx.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx'], {
      silent: true,
      ignoreReturnCode: true
@@ -103,7 +102,6 @@ describe('isAvailable', () => {
      standalone: true
    });
    await buildx.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`buildx`, [], {
      silent: true,
      ignoreReturnCode: true
--- a/tests/buildx/imagetools.test.itg.ts
+++ b/tests/buildx/imagetools.test.itg.ts
@@ -60,6 +60,16 @@ maybe('attestationDescriptors', () => {
    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-05.json'), {encoding: 'utf-8'}).trim());
    expect(attestations).toEqual(expectedAttestations);
  });
+  it('returns buildkit attestations descriptors for linux/amd64', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-06.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
+  it('returns buildkit attestations descriptors for linux/arm/v7', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-07.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
 });

 maybe('attestationDigests', () => {
@@ -75,4 +85,12 @@ maybe('attestationDigests', () => {
      'sha256:d95ca72d4f2a6bc416d4b2f3003b2af9d5f4dea99acec6ad3ab0c2082000a98c'
    ]);
  });
+  it('returns buildkit attestations digests for linux/amd64', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    expect(digests).toEqual(['sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2']);
+  });
+  it('returns buildkit attestations digests for linux/arm/v7', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    expect(digests).toEqual(['sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03']);
+  });
 });
--- a/tests/buildx/install.test.ts
+++ b/tests/buildx/install.test.ts
@@ -94,7 +94,6 @@ describe('download', () => {
 });

 describe('build', () => {
-  // eslint-disable-next-line jest/no-disabled-tests
  it.skip('builds refs/pull/648/head', async () => {
    const install = new Install();
    const toolPath = await install.build('https://github.com/docker/buildx.git#refs/pull/648/head');
@@ -103,7 +102,6 @@ describe('build', () => {
    expect(fs.existsSync(buildxBin)).toBe(true);
  }, 100000);

-  // eslint-disable-next-line jest/no-disabled-tests
  it.skip('builds 67bd6f4dc82a9cd96f34133dab3f6f7af803bb14', async () => {
    const install = new Install();
    const toolPath = await install.build('https://github.com/docker/buildx.git#67bd6f4dc82a9cd96f34133dab3f6f7af803bb14');
--- a/tests/compose/compose.test.ts
+++ b/tests/compose/compose.test.ts
@@ -49,7 +49,6 @@ describe('isAvailable', () => {
      standalone: false
    });
    await compose.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`docker`, ['compose'], {
      silent: true,
      ignoreReturnCode: true
@@ -61,7 +60,6 @@ describe('isAvailable', () => {
      standalone: true
    });
    await compose.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`compose`, [], {
      silent: true,
      ignoreReturnCode: true
--- a/tests/cosign/cosign.test.ts
+++ b/tests/cosign/cosign.test.ts
@@ -29,7 +29,6 @@ describe('isAvailable', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    const cosign = new Cosign();
    await cosign.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`cosign`, [], {
      silent: true,
      ignoreReturnCode: true
--- a/tests/cosign/install.test.itg.ts
+++ b/tests/cosign/install.test.itg.ts
@@ -27,7 +27,10 @@ describe('download', () => {
    'install cosign %s', async (version) => {
      await expect((async () => {
        const install = new Install();
-        const toolPath = await install.download(version);
+        const toolPath = await install.download({
+          version: version,
+          verifySignature: true
+        });
        if (!fs.existsSync(toolPath)) {
          throw new Error('toolPath does not exist');
        }
--- a/tests/cosign/install.test.ts
+++ b/tests/cosign/install.test.ts
@@ -38,7 +38,7 @@ describe('download', () => {
  ])(
  'acquires %p of cosign', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
    const cosignBin = await install.install(toolPath, tmpDir);
    expect(fs.existsSync(cosignBin)).toBe(true);
@@ -52,7 +52,7 @@ describe('download', () => {
  ])(
  'acquires %p of cosign with cache', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version);
+    const toolPath = await install.download({version});
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -63,7 +63,10 @@ describe('download', () => {
  ])(
  'acquires %p of cosign without cache', async (version) => {
    const install = new Install();
-    const toolPath = await install.download(version, true);
+    const toolPath = await install.download({
+      version: version,
+      ghaNoCache: true
+    });
    expect(fs.existsSync(toolPath)).toBe(true);
  }, 100000);

@@ -80,7 +83,9 @@ describe('download', () => {
    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
    const install = new Install();
-    const cosignBin = await install.download('latest');
+    const cosignBin = await install.download({
+      version: 'latest'
+    });
    expect(fs.existsSync(cosignBin)).toBe(true);
  }, 100000);
 });
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -57,7 +57,7 @@ describe('isInsideWorkTree', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    try {
      await Git.isInsideWorkTree();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['rev-parse', '--is-inside-work-tree'], {
@@ -81,7 +81,7 @@ describe('remoteURL', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    try {
      await Git.remoteURL();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['remote', 'get-url', 'origin'], {
@@ -233,6 +233,208 @@ describe('ref', () => {

    expect(ref).toEqual('refs/heads/test');
  });
+
+  it('returns mocked detached branch ref checked out by SHA', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, origin/feature-branch';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/feature-branch');
+  });
+
+  it('infers ref from local branch when detached HEAD returns only "HEAD"', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = 'refs/heads/main\nrefs/heads/develop';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/main');
+  });
+
+  it('infers ref from local branch when detached HEAD returns only "grafted, HEAD"', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'grafted, HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = 'refs/heads/main\nrefs/heads/develop';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/main');
+  });
+
+  it('infers ref from remote branch when no local branch contains HEAD', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = 'refs/remotes/origin/feature';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/feature');
+  });
+
+  it('infers ref from tag when no branch contains HEAD', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = '';
+          break;
+        case 'git tag --contains HEAD':
+          result = 'v1.0.0\nv0.9.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/tags/v1.0.0');
+  });
+
+  it('throws error when cannot infer ref from detached HEAD', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = '';
+          break;
+        case 'git tag --contains HEAD':
+          result = '';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    await expect(Git.ref()).rejects.toThrow('Cannot infer ref from detached HEAD');
+  });
+
+  it('handles remote ref without branch pattern when inferring from remote', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/heads/':
+          result = '';
+          break;
+        case 'git for-each-ref --format=%(refname) --contains HEAD --sort=-committerdate refs/remotes/':
+          result = 'refs/remotes/unusual-format';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/remotes/unusual-format');
+  });
 });

 describe('fullCommit', () => {
@@ -240,7 +442,7 @@ describe('fullCommit', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    try {
      await Git.fullCommit();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%H', 'HEAD', '--quiet', '--'], {
@@ -255,7 +457,7 @@ describe('shortCommit', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    try {
      await Git.shortCommit();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%h', 'HEAD', '--quiet', '--'], {
@@ -270,7 +472,7 @@ describe('tag', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    try {
      await Git.tag();
-    } catch (err) {
+    } catch {
      // noop
    }
    expect(execSpy).toHaveBeenCalledWith(`git`, ['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate'], {
--- a/tests/github.test.ts
+++ b/tests/github.test.ts
@@ -141,6 +141,7 @@ describe('actionsRuntimeToken', () => {
  it('malformed', async () => {
    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
    expect(() => {
+      // eslint-disable-next-line @typescript-eslint/no-unused-expressions
      GitHub.actionsRuntimeToken;
    }).toThrow();
  });
--- a/tests/oci/oci.test.ts
+++ b/tests/oci/oci.test.ts
@@ -14,14 +14,17 @@
 * limitations under the License.
 */

-import {afterEach, describe, expect, test} from '@jest/globals';
+import {afterEach, describe, expect, jest, test} from '@jest/globals';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
+import osm = require('os');

 import {OCI} from '../../src/oci/oci';

+import {Platform} from '../../src/types/oci/descriptor';
+
 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'oci-oci-'));

@@ -29,6 +32,25 @@ afterEach(function () {
  rimraf.sync(tmpDir);
 });

+describe('defaultPlatform', () => {
+  test.each([
+    ['win32', 'x64', {architecture: 'amd64', os: 'windows'}],
+    ['win32', 'arm64', {architecture: 'arm64', os: 'windows'}],
+    ['darwin', 'x64', {architecture: 'amd64', os: 'darwin'}],
+    ['darwin', 'arm64', {architecture: 'arm64', os: 'darwin'}],
+    ['linux', 'ia32', {architecture: '386', os: 'linux'}],
+    ['linux', 'x64', {architecture: 'amd64', os: 'linux'}],
+    ['linux', 'arm64', {architecture: 'arm64', os: 'linux'}],
+    ['linux', 'ppc64', {architecture: 'ppc64le', os: 'linux'}],
+    ['linux', 's390x', {architecture: 's390x', os: 'linux'}]
+  ])('default platform for %s/%s', async (os: string, arch: string, expected: Platform) => {
+    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
+    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    const res = OCI.defaultPlatform();
+    expect(res).toEqual(expected);
+  });
+});
+
 describe('loadArchive', () => {
  // prettier-ignore
  test.each(fs.readdirSync(path.join(fixturesDir, 'oci-archive')).filter(file => {
--- a/tests/regclient/regctl.test.ts
+++ b/tests/regclient/regctl.test.ts
@@ -85,7 +85,6 @@ describe('isAvailable', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    const regctl = new Regctl();
    await regctl.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`regctl`, [], {
      silent: true,
      ignoreReturnCode: true
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -14,27 +14,124 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, beforeAll} from '@jest/globals';
+import {beforeAll, describe, expect, jest, it, test} from '@jest/globals';
 import fs from 'fs';
 import * as path from 'path';

+import {Buildx} from '../../src/buildx/buildx';
+import {Build} from '../../src/buildx/build';
 import {Install as CosignInstall} from '../../src/cosign/install';
+import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';
+import {OCI} from '../../src/oci/oci';
 import {Sigstore} from '../../src/sigstore/sigstore';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

-const maybe = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ACTIONS_ID_TOKEN_REQUEST_URL && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu') ? describe : describe.skip;
+const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
+
+const maybe = runTest ? describe : describe.skip;
+const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;

 // needs current GitHub repo info
 jest.unmock('@actions/github');

 beforeAll(async () => {
  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download('v3.0.2', true);
+  const cosignBinPath = await cosignInstall.download({
+    version: 'v3.0.2'
+  });
  await cosignInstall.install(cosignBinPath);
 }, 100000);

-maybe('signProvenanceBlobs', () => {
+maybeIdToken('signAttestationManifests', () => {
+  it('build, sign and verify', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+    const imageName = 'ghcr.io/docker/actions-toolkit/test';
+
+    await expect(
+      (async () => {
+        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+          input: Buffer.from(process.env.GITHUB_TOKEN || '')
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--provenance=mode=max',
+          '--tag', `${imageName}:sigstore-itg`,
+          '--platform', 'linux/amd64,linux/arm64',
+          '--push',
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildDigest = build.resolveDigest(metadata);
+    expect(buildDigest).toBeDefined();
+
+    const sigstore = new Sigstore();
+    const signResults = await sigstore.signAttestationManifests({
+      imageNames: [imageName],
+      imageDigest: buildDigest!
+    });
+    expect(Object.keys(signResults).length).toEqual(2);
+
+    const verifyResults = await sigstore.verifySignedManifests(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
+    expect(Object.keys(verifyResults).length).toEqual(2);
+  }, 100000);
+});
+
+maybe('verifyImageAttestations', () => {
+  test.each([
+    ['moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`],
+    ['docker/dockerfile-upstream:master@sha256:3e8cd5ebf48acd1a1939649ad1c62ca44c029852b22493c16a9307b654334958', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`]
+  ])(
+    'given %p',
+    async (image, certificateIdentityRegexp) => {
+      const sigstore = new Sigstore();
+      const verifyResults = await sigstore.verifyImageAttestations(image, {
+        certificateIdentityRegexp: certificateIdentityRegexp
+      });
+      expect(Object.keys(verifyResults).length).toBeGreaterThan(0);
+      for (const [attestationRef, res] of Object.entries(verifyResults)) {
+        expect(attestationRef).toBeDefined();
+        expect(res.cosignArgs).toBeDefined();
+        expect(res.signatureManifestDigest).toBeDefined();
+      }
+    },
+    60000
+  );
+
+  it('default platform', async () => {
+    const sigstore = new Sigstore();
+    const verifyResults = await sigstore.verifyImageAttestations('moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', {
+      certificateIdentityRegexp: `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`,
+      platform: OCI.defaultPlatform()
+    });
+    expect(Object.keys(verifyResults).length).toEqual(1);
+    for (const [attestationRef, res] of Object.entries(verifyResults)) {
+      expect(attestationRef).toBeDefined();
+      expect(res.cosignArgs).toBeDefined();
+      expect(res.signatureManifestDigest).toBeDefined();
+    }
+  });
+});
+
+maybeIdToken('signProvenanceBlobs', () => {
  it('single platform', async () => {
    const sigstore = new Sigstore();
    const results = await sigstore.signProvenanceBlobs({
@@ -44,11 +141,10 @@ maybe('signProvenanceBlobs', () => {
    const provenancePath = Object.keys(results)[0];
    expect(provenancePath).toEqual(path.join(fixturesDir, 'sigstore', 'single', 'provenance.json'));
    expect(fs.existsSync(results[provenancePath].bundlePath)).toBe(true);
-    expect(results[provenancePath].bundle).toBeDefined();
+    expect(results[provenancePath].payload).toBeDefined();
    expect(results[provenancePath].certificate).toBeDefined();
    expect(results[provenancePath].tlogID).toBeDefined();
-    expect(results[provenancePath].attestationID).not.toBeDefined();
-    console.log(provenancePath, JSON.stringify(results[provenancePath].bundle, null, 2));
+    console.log(provenancePath, JSON.stringify(results[provenancePath].payload, null, 2));
  });
  it('multi-platform', async () => {
    const sigstore = new Sigstore();
@@ -59,16 +155,15 @@ maybe('signProvenanceBlobs', () => {
    for (const [provenancePath, res] of Object.entries(results)) {
      expect(provenancePath).toMatch(/linux_(amd64|arm64)\/provenance.json/);
      expect(fs.existsSync(res.bundlePath)).toBe(true);
-      expect(res.bundle).toBeDefined();
+      expect(res.payload).toBeDefined();
      expect(res.certificate).toBeDefined();
      expect(res.tlogID).toBeDefined();
-      expect(res.attestationID).not.toBeDefined();
-      console.log(provenancePath, JSON.stringify(res.bundle, null, 2));
+      console.log(provenancePath, JSON.stringify(res.payload, null, 2));
    }
  });
 });

-maybe('verifySignedArtifacts', () => {
+maybeIdToken('verifySignedArtifacts', () => {
  it('sign and verify', async () => {
    const sigstore = new Sigstore();
    const signResults = await sigstore.signProvenanceBlobs({
@@ -76,12 +171,9 @@ maybe('verifySignedArtifacts', () => {
    });
    expect(Object.keys(signResults).length).toEqual(2);

-    const verifyResults = await sigstore.verifySignedArtifacts(
-      {
-        certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-      },
-      signResults
-    );
+    const verifyResults = await sigstore.verifySignedArtifacts(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
    expect(Object.keys(verifyResults).length).toEqual(2);
    for (const [artifactPath, res] of Object.entries(verifyResults)) {
      expect(fs.existsSync(artifactPath)).toBe(true);
--- a/tests/testResultsProcessor.js
+++ b/tests/testResultsProcessor.js
@@ -14,16 +14,14 @@
 * limitations under the License.
 */

-// eslint-disable-next-line @typescript-eslint/no-var-requires
+/* eslint-disable @typescript-eslint/no-require-imports */
 const fs = require('fs');

 module.exports = results => {
-  const allSkipped = results.testResults.every(result => {
-    return result.skipped;
-  });
+  const allSkipped = results.testResults.every(result => result.skipped);
  if (allSkipped) {
    console.log('All tests were skipped!');
-    // create an empty file to signal that all tests were skipped for CI
+    fs.mkdirSync('./coverage', {recursive: true});
    fs.closeSync(fs.openSync('./coverage/allSkipped.txt', 'w'));
  }
  return results;
--- a/tests/undock/undock.test.ts
+++ b/tests/undock/undock.test.ts
@@ -46,7 +46,6 @@ describe('isAvailable', () => {
    const execSpy = jest.spyOn(Exec, 'getExecOutput');
    const undock = new Undock();
    await undock.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(execSpy).toHaveBeenCalledWith(`undock`, [], {
      silent: true,
      ignoreReturnCode: true
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -16,11 +16,11 @@

 ARG NODE_VERSION=20
 ARG DOCKER_VERSION=28.3
-ARG BUILDX_VERSION=0.29.1
+ARG BUILDX_VERSION=0.30.1
 ARG COMPOSE_VERSION=2.39.1
 ARG UNDOCK_VERSION=0.10.0
 ARG REGCTL_VERSION=v0.8.2
-ARG COSIGN_VERSION=v3.0.2
+ARG COSIGN_VERSION=v3.0.3

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
@@ -101,24 +101,3 @@ RUN --mount=type=bind,target=.,rw \

 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /
-
-FROM base AS publish
-ARG GITHUB_REF
-RUN --mount=type=bind,target=.,rw \
-    --mount=type=cache,target=/src/.yarn/cache \
-    --mount=type=cache,target=/src/node_modules \
-    --mount=type=secret,id=NODE_AUTH_TOKEN,env=NODE_AUTH_TOKEN <<EOT
-  set -e
-  if ! [[ $GITHUB_REF =~ ^refs/tags/v ]]; then
-    echo "GITHUB_REF is not a tag"
-    exit 1
-  fi
-  yarn install
-  yarn run build
-  npm config set //registry.npmjs.org/:_authToken $NODE_AUTH_TOKEN
-  npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
-  npm publish --access public
-
-  # FIXME: Can't publish with yarn berry atm: https://github.com/changesets/changesets/pull/674
-  #yarn publish --no-git-tag-version --new-version ${GITHUB_REF#refs/tags/v}
-EOT
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -99,23 +99,6 @@ target "test-coverage" {
  secret = ["id=GITHUB_TOKEN,env=GITHUB_TOKEN"]
 }

-# GITHUB_REF is the actual ref that triggers the workflow and used as version
-# when a tag is pushed: https://docs.github.com/en/actions/learn-github-actions/environment-variables#default-environment-variables
-variable "GITHUB_REF" {
-  default = ""
-}
-
-target "publish" {
-  inherits = ["_common"]
-  dockerfile = "dev.Dockerfile"
-  args = {
-    GITHUB_REF = GITHUB_REF
-  }
-  target = "publish"
-  output = ["type=cacheonly"]
-  secret = ["id=NODE_AUTH_TOKEN,env=NODE_AUTH_TOKEN"]
-}
-
 target "license-validate" {
  inherits = ["_common"]
  dockerfile = "./hack/dockerfiles/license.Dockerfile"
--- a/eslint.config.js
+++ b/eslint.config.js
@@ -0,0 +1,84 @@
+/**
+ * Copyright 2025 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/* eslint-disable @typescript-eslint/no-require-imports */
+const {defineConfig, globalIgnores} = require('eslint/config');
+const {fixupConfigRules, fixupPluginRules} = require('@eslint/compat');
+const typescriptEslint = require('@typescript-eslint/eslint-plugin');
+const jestPlugin = require('eslint-plugin-jest');
+const prettier = require('eslint-plugin-prettier');
+const globals = require('globals');
+const tsParser = require('@typescript-eslint/parser');
+const js = require('@eslint/js');
+const {FlatCompat} = require('@eslint/eslintrc');
+
+// __dirname and __filename exist natively in CommonJS
+const compat = new FlatCompat({
+  baseDirectory: __dirname,
+  recommendedConfig: js.configs.recommended,
+  allConfig: js.configs.all
+});
+
+module.exports = defineConfig([
+  globalIgnores(['.yarn/**/*', 'lib/**/*', 'coverage/**/*', 'node_modules/**/*']),
+  {
+    extends: fixupConfigRules(
+      compat.extends(
+        'eslint:recommended',
+        'plugin:@typescript-eslint/eslint-recommended',
+        'plugin:@typescript-eslint/recommended',
+        'plugin:import/errors',
+        'plugin:import/typescript',
+        'plugin:import/warnings',
+        'plugin:jest/recommended',
+        'plugin:prettier/recommended'
+      )
+    ),
+
+    plugins: {
+      '@typescript-eslint': fixupPluginRules(typescriptEslint),
+      jest: fixupPluginRules(jestPlugin),
+      prettier: fixupPluginRules(prettier)
+    },
+
+    languageOptions: {
+      globals: {
+        ...globals.node,
+        ...globals.mocha,
+        ...globals.jest
+      },
+      parser: tsParser,
+      ecmaVersion: 2023,
+      sourceType: 'commonjs'
+    },
+
+    rules: {
+      '@typescript-eslint/no-require-imports': [
+        'error',
+        {
+          allowAsImport: true
+        }
+      ],
+      'import/no-unresolved': [
+        'error',
+        {
+          ignore: ['csv-parse/sync', '@octokit/openapi-types']
+        }
+      ],
+      'jest/no-disabled-tests': 0
+    }
+  }
+]);
--- a/jest.config.itg.js
+++ b/jest.config.itg.js
@@ -26,6 +26,6 @@ module.exports = {
  moduleNameMapper: {
    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
  },
-  testResultsProcessor: './__tests__/testResultsProcessor.ts',
+  testResultsProcessor: '<rootDir>/__tests__/testResultsProcessor.js',
  verbose: false
 };
--- a/jest.config.js
+++ b/jest.config.js
@@ -14,9 +14,10 @@
 * limitations under the License.
 */

-import fs from 'fs';
-import os from 'os';
-import path from 'path';
+/* eslint-disable @typescript-eslint/no-require-imports */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');

 const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));

@@ -28,9 +29,7 @@ process.env = Object.assign({}, process.env, {
  GITHUB_RUN_NUMBER: 15,
  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
-}) as {
-  [key: string]: string;
-};
+});

 module.exports = {
  clearMocks: true,
@@ -46,6 +45,6 @@ module.exports = {
  },
  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
  coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
-  testResultsProcessor: './__tests__/testResultsProcessor.ts',
+  testResultsProcessor: '<rootDir>/__tests__/testResultsProcessor.js',
  verbose: true
 };
--- a/package.json
+++ b/package.json
@@ -12,9 +12,9 @@
    "prettier:fix": "prettier --write \"./**/*.ts\"",
    "test": "jest",
    "test:coverage": "jest --coverage",
-    "test:itg": "jest -c jest.config.itg.ts --runInBand --detectOpenHandles",
-    "test:itg-list": "jest -c jest.config.itg.ts --listTests",
-    "test:itg-coverage": "jest --coverage -c jest.config.itg.ts --runInBand --detectOpenHandles"
+    "test:itg": "jest -c jest.config.itg.js --runInBand",
+    "test:itg-list": "jest -c jest.config.itg.js --listTests",
+    "test:itg-coverage": "jest -c jest.config.itg.js --coverage --runInBand"
  },
  "repository": {
    "type": "git",
@@ -45,54 +45,57 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/artifact": "^4.0.0",
-    "@actions/attest": "^2.0.0",
-    "@actions/cache": "^4.1.0",
-    "@actions/core": "^1.11.1",
-    "@actions/exec": "^1.1.1",
-    "@actions/github": "^6.0.1",
-    "@actions/http-client": "^2.2.3",
-    "@actions/io": "^1.1.3",
-    "@actions/tool-cache": "^2.0.2",
-    "@azure/storage-blob": "^12.15.0",
+    "@actions/artifact": "^5.0.2",
+    "@actions/cache": "^5.0.2",
+    "@actions/core": "^2.0.2",
+    "@actions/exec": "^2.0.0",
+    "@actions/github": "^7.0.0",
+    "@actions/http-client": "^3.0.1",
+    "@actions/io": "^2.0.0",
+    "@actions/tool-cache": "^3.0.0",
+    "@azure/storage-blob": "^12.29.1",
    "@octokit/core": "^5.2.2",
    "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
-    "@sigstore/bundle": "^3.1.0",
-    "@sigstore/sign": "^3.1.0",
+    "@sigstore/bundle": "^4.0.0",
+    "@sigstore/sign": "^4.1.0",
+    "@sigstore/tuf": "^4.0.1",
+    "@sigstore/verify": "^3.1.0",
    "async-retry": "^1.3.3",
    "csv-parse": "^6.1.0",
    "gunzip-maybe": "^1.4.2",
    "handlebars": "^4.7.8",
    "he": "^1.2.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.1.1",
    "jwt-decode": "^4.0.0",
    "semver": "^7.7.3",
    "tar-stream": "^3.1.7",
    "tmp": "^0.2.5"
  },
  "devDependencies": {
-    "@sigstore/mock": "^0.10.0",
-    "@sigstore/rekor-types": "^3.0.0",
-    "@types/gunzip-maybe": "^1.4.2",
+    "@eslint/compat": "^2.0.0",
+    "@eslint/eslintrc": "^3.3.3",
+    "@eslint/js": "^9.39.2",
+    "@sigstore/rekor-types": "^4.0.0",
+    "@types/gunzip-maybe": "^1.4.3",
    "@types/he": "^1.2.3",
    "@types/js-yaml": "^4.0.9",
-    "@types/node": "^20.19.9",
+    "@types/node": "^20.19.27",
    "@types/semver": "^7.7.1",
    "@types/tar-stream": "^3.1.4",
    "@types/tmp": "^0.2.6",
-    "@typescript-eslint/eslint-plugin": "^7.18.0",
-    "@typescript-eslint/parser": "^7.18.0",
-    "dotenv": "^17.2.1",
-    "eslint": "^8.57.1",
-    "eslint-config-prettier": "^9.1.2",
+    "@typescript-eslint/eslint-plugin": "^8.50.0",
+    "@typescript-eslint/parser": "^8.50.0",
+    "dotenv": "^17.2.3",
+    "eslint": "^9.39.2",
+    "eslint-config-prettier": "^10.1.8",
    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-jest": "^28.14.0",
-    "eslint-plugin-prettier": "^5.5.3",
-    "jest": "^29.7.0",
-    "prettier": "^3.6.2",
-    "rimraf": "^6.0.1",
-    "ts-jest": "^29.4.1",
+    "eslint-plugin-jest": "^29.5.0",
+    "eslint-plugin-prettier": "^5.5.4",
+    "jest": "^30.2.0",
+    "prettier": "^3.7.4",
+    "rimraf": "^6.1.2",
+    "ts-jest": "^29.4.6",
    "ts-node": "^10.9.2",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.3"
  }
 }
--- a/src/buildkit/buildkit.ts
+++ b/src/buildkit/buildkit.ts
@@ -85,7 +85,7 @@ export class BuildKit {
      if (!bkversion) {
        try {
          bkversion = await this.getVersionWithinImage(node.name || '');
-        } catch (e) {
+        } catch {
          core.debug(`BuildKit.versionSatisfies ${node.name}: can't get version`);
          return false;
        }
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -105,13 +105,7 @@ export class Bake {
  public async getDefinition(cmdOpts: BakeCmdOpts, execOptions?: ExecOptions): Promise<BakeDefinition> {
    execOptions = execOptions || {ignoreReturnCode: true};
    execOptions.ignoreReturnCode = true;
-    if (cmdOpts.githubToken) {
-      execOptions.env = Object.assign({}, process.env, {
-        BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken
-      }) as {
-        [key: string]: string;
-      };
-    }
+    execOptions.env = Object.assign({}, process.env, execOptions.env || {}, cmdOpts.githubToken ? {BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken} : {});

    const args = ['bake'];

@@ -424,4 +418,34 @@ export class Bake {
    }
    return false;
  }
+
+  public static hasProvenanceAttestation(def: BakeDefinition): boolean {
+    return Bake.hasAttestationType('provenance', Bake.attestations(def));
+  }
+
+  public static hasSBOMAttestation(def: BakeDefinition): boolean {
+    return Bake.hasAttestationType('sbom', Bake.attestations(def));
+  }
+
+  public static hasAttestationType(name: string, attestations: Array<AttestEntry>): boolean {
+    for (const attestation of attestations) {
+      if (attestation.type == name) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  private static attestations(def: BakeDefinition): Array<AttestEntry> {
+    const attestations = new Array<AttestEntry>();
+    for (const key in def.target) {
+      const target = def.target[key];
+      if (target.attest) {
+        for (const attest of target.attest) {
+          attestations.push(Bake.parseAttestEntry(attest));
+        }
+      }
+    }
+    return attestations;
+  }
 }
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -169,7 +169,7 @@ export class Build {
    }
    try {
      return core.getBooleanInput(name) ? `builder-id=${GitHub.workflowRunURL(true)}` : 'false';
-    } catch (err) {
+    } catch {
      // not a valid boolean, so we assume it's a string
      return Build.resolveProvenanceAttrs(input);
    }
@@ -302,7 +302,7 @@ export class Build {
          // https://github.com/docker/buildx/blob/8abef5908705e49f7ba88ef8c957e1127b597a2a/util/buildflags/attests.go#L13-L21
          const v = Util.parseBool(attr);
          res.push(`disabled=${!v}`);
-        } catch (err) {
+        } catch {
          res.push(attr);
        }
      }
--- a/src/buildx/buildx.ts
+++ b/src/buildx/buildx.ts
@@ -148,7 +148,7 @@ export class Buildx {
    let url: URL;
    try {
      url = new URL(endpoint);
-    } catch (e) {
+    } catch {
      return [];
    }
    if (url.protocol != 'tcp:') {
@@ -280,7 +280,7 @@ export class Buildx {
    const fnGitURL = function (inp: string): GitURL | undefined {
      try {
        return Git.parseURL(inp);
-      } catch (e) {
+      } catch {
        // noop
      }
    };
--- a/src/buildx/imagetools.ts
+++ b/src/buildx/imagetools.ts
@@ -19,7 +19,7 @@ import {Exec} from '../exec';

 import {Manifest as ImageToolsManifest} from '../types/buildx/imagetools';
 import {Image} from '../types/oci/config';
-import {Descriptor} from '../types/oci/descriptor';
+import {Descriptor, Platform} from '../types/oci/descriptor';
 import {Digest} from '../types/oci/digest';

 export interface ImageToolsOpts {
@@ -83,15 +83,39 @@ export class ImageTools {
    });
  }

-  public async attestationDescriptors(name: string): Promise<Array<Descriptor>> {
+  public async attestationDescriptors(name: string, platform?: Platform): Promise<Array<Descriptor>> {
    const manifest = await this.inspectManifest(name);
-    if (typeof manifest === 'object' && manifest !== null && 'manifests' in manifest && Array.isArray(manifest.manifests)) {
-      return manifest.manifests.filter(m => m.annotations && m.annotations['vnd.docker.reference.type'] === 'attestation-manifest');
+
+    if (typeof manifest !== 'object' || manifest === null || !('manifests' in manifest) || !Array.isArray(manifest.manifests)) {
+      throw new Error(`No descriptor found for ${name}`);
    }
-    throw new Error(`No attestation descriptors found for ${name}`);
+
+    const attestations = manifest.manifests.filter(m => m.annotations?.['vnd.docker.reference.type'] === 'attestation-manifest');
+    if (!platform) {
+      return attestations;
+    }
+
+    const manifestByDigest = new Map<string, Descriptor>();
+    for (const m of manifest.manifests) {
+      if (m.digest) {
+        manifestByDigest.set(m.digest, m);
+      }
+    }
+
+    return attestations.filter(attestation => {
+      const refDigest = attestation.annotations?.['vnd.docker.reference.digest'];
+      if (!refDigest) {
+        return false;
+      }
+      const referencedManifest = manifestByDigest.get(refDigest);
+      if (!referencedManifest) {
+        return false;
+      }
+      return referencedManifest.platform?.os === platform.os && referencedManifest.platform?.architecture === platform.architecture && (referencedManifest.platform?.variant ?? '') === (platform.variant ?? '');
+    });
  }

-  public async attestationDigests(name: string): Promise<Array<Digest>> {
-    return (await this.attestationDescriptors(name)).map(attestation => attestation.digest);
+  public async attestationDigests(name: string, platform?: Platform): Promise<Array<Digest>> {
+    return (await this.attestationDescriptors(name, platform)).map(attestation => attestation.digest);
  }
 }
--- a/src/cache.ts
+++ b/src/cache.ts
@@ -64,8 +64,12 @@ export class Cache {

    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
      if (skipState) {
-        core.debug(`Cache.save caching ${this.ghaCacheKey} to GitHub Actions cache`);
-        await cache.saveCache([this.cacheDir], this.ghaCacheKey);
+        try {
+          core.debug(`Cache.save caching ${this.ghaCacheKey} to GitHub Actions cache`);
+          await cache.saveCache([this.cacheDir], this.ghaCacheKey);
+        } catch (e) {
+          core.warning(`Failed to save cache: ${e}`);
+        }
      } else {
        core.debug(`Cache.save sending ${this.ghaCacheKey} to post state`);
        core.saveState(
@@ -82,26 +86,28 @@ export class Cache {
  }

  public async find(): Promise<string> {
-    let htcPath = tc.find(this.opts.htcName, this.opts.htcVersion, this.platform());
-    if (htcPath) {
-      core.info(`Restored from hosted tool cache ${htcPath}`);
-      return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
-    }
-
-    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
-      core.debug(`GitHub Actions cache feature available`);
-      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
-        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
-        htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
-        core.info(`Cached to hosted tool cache ${htcPath}`);
+    try {
+      let htcPath = tc.find(this.opts.htcName, this.opts.htcVersion, this.platform());
+      if (htcPath) {
+        core.info(`Restored from hosted tool cache ${htcPath}`);
        return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
      }
-    } else if (this.ghaNoCache) {
-      core.info(`GitHub Actions cache disabled`);
-    } else {
-      core.info(`GitHub Actions cache feature not available`);
+      if (!this.ghaNoCache && cache.isFeatureAvailable()) {
+        core.debug(`GitHub Actions cache feature available`);
+        if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
+          core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
+          htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
+          core.info(`Cached to hosted tool cache ${htcPath}`);
+          return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
+        }
+      } else if (this.ghaNoCache) {
+        core.info(`GitHub Actions cache disabled`);
+      } else {
+        core.info(`GitHub Actions cache feature not available`);
+      }
+    } catch (e) {
+      core.warning(`Failed to restore cache: ${e}`);
    }
-
    return '';
  }

@@ -120,13 +126,17 @@ export class Cache {
    if (!cacheState.dir || !cacheState.key) {
      throw new Error(`Invalid cache post state: ${state}`);
    }
-    core.info(`Caching ${cacheState.key} to GitHub Actions cache`);
-    await cache.saveCache([cacheState.dir], cacheState.key);
+    try {
+      core.info(`Caching ${cacheState.key} to GitHub Actions cache`);
+      await cache.saveCache([cacheState.dir], cacheState.key);
+    } catch (e) {
+      core.warning(`Failed to save cache: ${e}`);
+    }
    return cacheState;
  }

  private copyToCache(file: string): string {
-    core.debug(`Copying ${file} to ${this.cachePath}`);
+    core.info(`Copying ${file} to ${this.cachePath}`);
    fs.copyFileSync(file, this.cachePath);
    return this.cachePath;
  }
--- a/src/cosign/cosign.ts
+++ b/src/cosign/cosign.ts
@@ -142,15 +142,12 @@ export class Cosign {
        bundlePayload = obj as SerializedBundle;
      }

-      if (bundlePayload && signatureManifestDigest) {
+      if (bundlePayload && (signatureManifestDigest || signatureManifestFallbackDigest)) {
+        errors = undefined; // clear errors if we have both payload and manifest digest
        break;
      }
    }

-    if (!errors && !bundlePayload) {
-      throw new Error(`Cannot find signature bundle from cosign command output: ${logs}`);
-    }
-
    return {
      bundle: bundlePayload,
      signatureManifestDigest: signatureManifestDigest || signatureManifestFallbackDigest,
--- a/src/cosign/install.ts
+++ b/src/cosign/install.ts
@@ -19,6 +19,9 @@ import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';
 import * as tc from '@actions/tool-cache';
+import {bundleFromJSON, SerializedBundle} from '@sigstore/bundle';
+import * as tuf from '@sigstore/tuf';
+import {toSignedEntity, toTrustMaterial, Verifier} from '@sigstore/verify';
 import * as semver from 'semver';
 import * as util from 'util';

@@ -34,6 +37,13 @@ import {DownloadVersion} from '../types/cosign/cosign';
 import {GitHubRelease} from '../types/github';
 import {dockerfileContent} from './dockerfile';

+export interface DownloadOpts {
+  version: string;
+  ghaNoCache?: boolean;
+  skipState?: boolean;
+  verifySignature?: boolean;
+}
+
 export interface InstallOpts {
  githubToken?: string;
  buildx?: Buildx;
@@ -48,8 +58,8 @@ export class Install {
    this.buildx = opts?.buildx || new Buildx();
  }

-  public async download(v: string, ghaNoCache?: boolean, skipState?: boolean): Promise<string> {
-    const version: DownloadVersion = await Install.getDownloadVersion(v);
+  public async download(opts: DownloadOpts): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(opts.version);
    core.debug(`Install.download version: ${version.version}`);

    const release: GitHubRelease = await Install.getRelease(version, this.githubToken);
@@ -68,7 +78,7 @@ export class Install {
      htcVersion: vspec,
      baseCacheDir: path.join(os.homedir(), '.bin'),
      cacheFile: os.platform() == 'win32' ? 'cosign.exe' : 'cosign',
-      ghaNoCache: ghaNoCache
+      ghaNoCache: opts.ghaNoCache
    });

    const cacheFoundPath = await installCache.find();
@@ -83,7 +93,11 @@ export class Install {
    const htcDownloadPath = await tc.downloadTool(downloadURL, undefined, this.githubToken);
    core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);

-    const cacheSavePath = await installCache.save(htcDownloadPath, skipState);
+    if (opts.verifySignature && semver.satisfies(vspec, '>=3.0.1')) {
+      await this.verifySignature(htcDownloadPath, downloadURL);
+    }
+
+    const cacheSavePath = await installCache.save(htcDownloadPath, opts.skipState);
    core.info(`Cached to ${cacheSavePath}`);
    return cacheSavePath;
  }
@@ -176,6 +190,35 @@ export class Install {
    return await new Buildx({standalone: buildStandalone}).getCommand(args);
  }

+  private async verifySignature(cosignBinPath: string, downloadURL: string): Promise<void> {
+    const bundleURL = `${downloadURL}.sigstore.json`;
+    core.info(`Downloading keyless verification bundle at ${bundleURL}`);
+    const bundlePath = await tc.downloadTool(bundleURL, undefined, this.githubToken);
+    core.debug(`Install.verifySignature bundlePath: ${bundlePath}`);
+
+    core.info(`Verifying keyless verification bundle signature`);
+    const parsedBundle = JSON.parse(fs.readFileSync(bundlePath, 'utf-8')) as SerializedBundle;
+    const bundle = bundleFromJSON(parsedBundle);
+
+    core.info(`Fetching Sigstore TUF trusted root metadata`);
+    const trustedRoot = await tuf.getTrustedRoot();
+    const trustMaterial = toTrustMaterial(trustedRoot);
+
+    try {
+      core.info(`Verifying cosign binary signature`);
+      const signedEntity = toSignedEntity(bundle, fs.readFileSync(cosignBinPath));
+      const verifier = new Verifier(trustMaterial);
+      const signer = verifier.verify(signedEntity, {
+        subjectAlternativeName: 'keyless@projectsigstore.iam.gserviceaccount.com',
+        extensions: {issuer: 'https://accounts.google.com'}
+      });
+      core.debug(`Install.verifySignature signer: ${JSON.stringify(signer)}`);
+      core.info(`Cosign binary signature verified!`);
+    } catch (err) {
+      throw new Error(`Failed to verify cosign binary signature: ${err}`);
+    }
+  }
+
  private filename(): string {
    let arch: string;
    switch (os.arch()) {
--- a/src/docker/docker.ts
+++ b/src/docker/docker.ts
@@ -60,7 +60,7 @@ export class Docker {
        silent: true
      });
      return true;
-    } catch (e) {
+    } catch {
      return false;
    }
  }
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -269,22 +269,12 @@ export class Install {
    await io.mkdirP(limaDir);
    const dockerHost = `unix://${limaDir}/docker.sock`;

-    // avoid brew to auto update and upgrade unrelated packages.
-    let envs = Object.assign({}, process.env, {
-      HOMEBREW_NO_AUTO_UPDATE: '1',
-      HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK: '1'
-    }) as {
-      [key: string]: string;
-    };
-
    if (!(await Install.limaInstalled())) {
-      await core.group('Installing lima', async () => {
-        await Exec.exec('brew', ['install', 'lima'], {env: envs});
-      });
+      await this.brewInstall('lima');
    }

    await core.group('Lima version', async () => {
-      await Exec.exec('lima', ['--version'], {env: envs});
+      await Exec.exec('lima', ['--version']);
    });

    await core.group('Creating lima config', async () => {
@@ -313,9 +303,7 @@ export class Install {
    });

    if (!(await Install.qemuInstalled())) {
-      await core.group('Installing QEMU', async () => {
-        await Exec.exec('brew', ['install', 'qemu'], {env: envs});
-      });
+      await this.brewInstall('qemu');
    }
    const qemuBin = await Install.qemuBin();
    await core.group('QEMU version', async () => {
@@ -324,7 +312,7 @@ export class Install {

    // lima might already be started on the runner so env var added in download
    // method is not expanded to the running process.
-    envs = Object.assign({}, envs, {
+    const envs = Object.assign({}, process.env, {
      PATH: `${this.toolDir}:${process.env.PATH}`
    }) as {
      [key: string]: string;
@@ -751,4 +739,72 @@ EOF`,
    });
    return <Image>JSON.parse(blob);
  }
+
+  private async brewInstall(packageName: string, revision?: string): Promise<void> {
+    // avoid brew to auto update and upgrade unrelated packages.
+    const envs = Object.assign({}, process.env, {
+      HOMEBREW_NO_AUTO_UPDATE: '1',
+      HOMEBREW_NO_INSTALL_UPGRADE: '1',
+      HOMEBREW_NO_INSTALL_CLEANUP: '1'
+    }) as {
+      [key: string]: string;
+    };
+
+    await core.group(`Installing ${packageName}`, async () => {
+      if (!revision) {
+        await Exec.exec('brew', ['install', packageName]);
+      } else {
+        const dockerTap = 'docker-actions-toolkit/tap';
+        const hasDockerTap = await Exec.getExecOutput('brew', ['tap'], {
+          ignoreReturnCode: true,
+          silent: true,
+          env: envs
+        }).then(res => {
+          if (res.stderr.length > 0 && res.exitCode != 0) {
+            throw new Error(res.stderr);
+          }
+          for (const line of res.stdout.trim().split('\n')) {
+            if (line.includes(dockerTap)) {
+              return true;
+            }
+          }
+          return false;
+        });
+        if (!hasDockerTap) {
+          await Exec.exec('brew', ['tap-new', dockerTap], {env: envs});
+        }
+        const brewRepoTapPath = await Exec.getExecOutput('brew', ['--repo', dockerTap], {
+          ignoreReturnCode: true,
+          silent: true,
+          env: envs
+        }).then(res => {
+          if (res.stderr.length > 0 && res.exitCode != 0) {
+            throw new Error(res.stderr);
+          }
+          return res.stdout.trim();
+        });
+        const formulaURL = `https://raw.githubusercontent.com/Homebrew/homebrew-core/${revision}/Formula/${packageName.charAt(0)}/${packageName}.rb`;
+        await tc.downloadTool(formulaURL, path.join(brewRepoTapPath, 'Formula', `${packageName}.rb`));
+        const hasFormulaInstalled = await Exec.getExecOutput('brew', ['ls', '-1'], {
+          ignoreReturnCode: true,
+          silent: true,
+          env: envs
+        }).then(res => {
+          if (res.stderr.length > 0 && res.exitCode != 0) {
+            throw new Error(res.stderr);
+          }
+          for (const line of res.stdout.trim().split('\n')) {
+            if (line.trim() == packageName) {
+              return true;
+            }
+          }
+          return false;
+        });
+        if (hasFormulaInstalled) {
+          await Exec.exec('brew', ['uninstall', packageName, '--ignore-dependencies'], {env: envs});
+        }
+        await Exec.exec('brew', ['install', `${dockerTap}/${packageName}`], {env: envs});
+      }
+    });
+  }
 }
--- a/src/git.ts
+++ b/src/git.ts
@@ -122,31 +122,44 @@ export class Git {

  private static async getDetachedRef(): Promise<string> {
    const res = await Git.exec(['show', '-s', '--pretty=%D']);
+    core.debug(`detached HEAD ref: ${res}`);
+
+    const normalizedRef = res.replace(/^grafted, /, '').trim();
+
+    if (normalizedRef === 'HEAD') {
+      return await Git.inferRefFromHead();
+    }

    // Can be "HEAD, <tagname>" or "grafted, HEAD, <tagname>"
-    const refMatch = res.match(/^(grafted, )?HEAD, (.*)$/);
+    const refMatch = normalizedRef.match(/^HEAD, (.*)$/);

-    if (!refMatch || !refMatch[2]) {
+    if (!refMatch || !refMatch[1]) {
      throw new Error(`Cannot find detached HEAD ref in "${res}"`);
    }

-    const ref = refMatch[2].trim();
+    const ref = refMatch[1].trim();

    // Tag refs are formatted as "tag: <tagname>"
    if (ref.startsWith('tag: ')) {
      return `refs/tags/${ref.split(':')[1].trim()}`;
    }

-    // Branch refs are formatted as "<origin>/<branch-name>, <branch-name>"
+    // Pull request merge refs are formatted as "pull/<number>/<state>"
+    const prMatch = ref.match(/^pull\/\d+\/(head|merge)$/);
+    if (prMatch) {
+      return `refs/${ref}`;
+    }
+
+    // Branch refs can be formatted as "<origin>/<branch-name>, <branch-name>"
    const branchMatch = ref.match(/^[^/]+\/[^/]+, (.+)$/);
    if (branchMatch) {
      return `refs/heads/${branchMatch[1].trim()}`;
    }

-    // Pull request merge refs are formatted as "pull/<number>/<state>"
-    const prMatch = ref.match(/^pull\/\d+\/(head|merge)$/);
-    if (prMatch) {
-      return `refs/${ref}`;
+    // Branch refs checked out by its latest SHA can be formatted as "<origin>/<branch-name>"
+    const shaBranchMatch = ref.match(/^[^/]+\/(.+)$/);
+    if (shaBranchMatch) {
+      return `refs/heads/${shaBranchMatch[1].trim()}`;
    }

    throw new Error(`Unsupported detached HEAD ref in "${res}"`);
@@ -164,6 +177,43 @@ export class Git {
    });
  }

+  private static async inferRefFromHead(): Promise<string> {
+    const localRef = await Git.findContainingRef('refs/heads/');
+    if (localRef) {
+      return localRef;
+    }
+
+    const remoteRef = await Git.findContainingRef('refs/remotes/');
+    if (remoteRef) {
+      const remoteMatch = remoteRef.match(/^refs\/remotes\/[^/]+\/(.+)$/);
+      if (remoteMatch) {
+        return `refs/heads/${remoteMatch[1]}`;
+      }
+      return remoteRef;
+    }
+
+    const tagRef = await Git.exec(['tag', '--contains', 'HEAD']);
+    const [firstTag] = tagRef
+      .split('\n')
+      .map(tag => tag.trim())
+      .filter(tag => tag.length > 0);
+    if (firstTag) {
+      return `refs/tags/${firstTag}`;
+    }
+
+    throw new Error(`Cannot infer ref from detached HEAD`);
+  }
+
+  private static async findContainingRef(scope: string): Promise<string | undefined> {
+    const refs = await Git.exec(['for-each-ref', '--format=%(refname)', '--contains', 'HEAD', '--sort=-committerdate', scope]);
+
+    const [first] = refs
+      .split('\n')
+      .map(r => r.trim())
+      .filter(r => r.length > 0);
+    return first;
+  }
+
  public static async commitDate(ref: string): Promise<Date> {
    return new Date(await Git.exec(['show', '-s', '--format="%ci"', ref]));
  }
--- a/src/github.ts
+++ b/src/github.ts
@@ -32,7 +32,7 @@ import * as github from '@actions/github';
 import {GitHub as Octokit} from '@actions/github/lib/utils';
 import {Context} from '@actions/github/lib/context';
 import * as httpm from '@actions/http-client';
-import {TransferProgressEvent} from '@azure/core-http';
+import {TransferProgressEvent} from '@azure/core-rest-pipeline';
 import {BlobClient, BlobHTTPHeaders} from '@azure/storage-blob';
 import {jwtDecode, JwtPayload} from 'jwt-decode';

@@ -58,11 +58,26 @@ export class GitHub {
  }

  public async releases(name: string, opts: GitHubContentOpts): Promise<Record<string, GitHubRelease>> {
+    let releases: Record<string, GitHubRelease>;
+    try {
+      // try without token first
+      releases = await this.releasesRaw(name, opts);
+    } catch (error) {
+      if (!this.githubToken) {
+        throw error;
+      }
+      // try with token
+      releases = await this.releasesRaw(name, opts, this.githubToken);
+    }
+    return releases;
+  }
+
+  public async releasesRaw(name: string, opts: GitHubContentOpts, token?: string): Promise<Record<string, GitHubRelease>> {
    const url = `https://raw.githubusercontent.com/${opts.owner}/${opts.repo}/${opts.ref}/${opts.path}`;
    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
    // prettier-ignore
-    const httpResp: httpm.HttpClientResponse = await http.get(url, this.githubToken ? {
-      Authorization: `token ${this.githubToken}`
+    const httpResp: httpm.HttpClientResponse = await http.get(url, token ? {
+      Authorization: `token ${token}`
    } : undefined);
    const dt = await httpResp.readBody();
    const statusCode = httpResp.message.statusCode || 500;
--- a/src/oci/oci.ts
+++ b/src/oci/oci.ts
@@ -14,6 +14,7 @@
 * limitations under the License.
 */
 import fs from 'fs';
+import os from 'os';
 import gunzip from 'gunzip-maybe';
 import * as path from 'path';
 import {Readable} from 'stream';
@@ -21,12 +22,59 @@ import * as tar from 'tar-stream';

 import {Archive, LoadArchiveOpts} from '../types/oci/oci';
 import {Index} from '../types/oci';
+import {Platform} from '../types/oci/descriptor';
 import {Manifest} from '../types/oci/manifest';
 import {Image} from '../types/oci/config';
 import {IMAGE_BLOBS_DIR_V1, IMAGE_INDEX_FILE_V1, IMAGE_LAYOUT_FILE_V1, ImageLayout} from '../types/oci/layout';
 import {MEDIATYPE_IMAGE_INDEX_V1, MEDIATYPE_IMAGE_MANIFEST_V1} from '../types/oci/mediatype';

 export class OCI {
+  public static defaultPlatform(): Platform {
+    const nodePlatform = os.platform();
+    const nodeArch = os.arch();
+
+    const goosMap: Record<string, string> = {
+      win32: 'windows',
+      sunos: 'solaris'
+      // others (linux, darwin, freebsd, openbsd, netbsd, aix, android) match Go already
+    };
+
+    const goArchMap: Record<string, string> = {
+      x64: 'amd64',
+      ia32: '386',
+      arm: 'arm',
+      arm64: 'arm64',
+      ppc64: 'ppc64le',
+      s390x: 's390x',
+      riscv64: 'riscv64',
+      loong64: 'loong64',
+      mips: 'mips',
+      mipsel: 'mipsle',
+      mips64: 'mips64',
+      mips64el: 'mips64le'
+    };
+
+    const goos = goosMap[nodePlatform] ?? nodePlatform;
+    const goarch = goArchMap[nodeArch] ?? nodeArch;
+
+    let variant: string | undefined;
+    if (goarch === 'arm') {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      const armVersionRaw = (process.config.variables as any)?.arm_version;
+      const armVersion = Number(armVersionRaw);
+      // Go only recognizes v5/v6/v7 for GOARM. Do not emit v8+ (that would be arm64).
+      if ([5, 6, 7].includes(armVersion)) {
+        variant = `v${armVersion}`;
+      }
+    }
+
+    return {
+      architecture: goarch,
+      os: goos,
+      variant: variant
+    };
+  }
+
  public static loadArchive(opts: LoadArchiveOpts): Promise<Archive> {
    return new Promise<Archive>((resolve, reject) => {
      const tarex: tar.Extract = tar.extract();
--- a/src/sigstore/sigstore.ts
+++ b/src/sigstore/sigstore.ts
@@ -18,12 +18,9 @@ import {X509Certificate} from 'crypto';
 import fs from 'fs';
 import path from 'path';

-import {Endpoints} from '@actions/attest/lib/endpoints';
 import * as core from '@actions/core';
-import {signPayload} from '@actions/attest/lib/sign';
 import {bundleFromJSON, bundleToJSON} from '@sigstore/bundle';
-import {Attestation} from '@actions/attest';
-import {Bundle} from '@sigstore/sign';
+import {Artifact, Bundle, CIContextProvider, DSSEBundleBuilder, FulcioSigner, RekorWitness, TSAWitness, Witness} from '@sigstore/sign';

 import {Cosign} from '../cosign/cosign';
 import {Exec} from '../exec';
@@ -31,47 +28,22 @@ import {GitHub} from '../github';
 import {ImageTools} from '../buildx/imagetools';

 import {MEDIATYPE_PAYLOAD as INTOTO_MEDIATYPE_PAYLOAD, Subject} from '../types/intoto/intoto';
-import {FULCIO_URL, REKOR_URL, SEARCH_URL, TSASERVER_URL} from '../types/sigstore/sigstore';
-
-export interface SignAttestationManifestsOpts {
-  imageNames: Array<string>;
-  imageDigest: string;
-  noTransparencyLog?: boolean;
-}
-
-export interface SignAttestationManifestsResult extends Attestation {
-  imageName: string;
-}
-
-export interface VerifySignedManifestsOpts {
-  certificateIdentityRegexp: string;
-  retries?: number;
-}
-
-export interface VerifySignedManifestsResult {
-  cosignArgs: Array<string>;
-  signatureManifestDigest: string;
-}
-
-export interface SignProvenanceBlobsOpts {
-  localExportDir: string;
-  name?: string;
-  noTransparencyLog?: boolean;
-}
-
-export interface SignProvenanceBlobsResult extends Attestation {
-  bundlePath: string;
-  subjects: Array<Subject>;
-}
-
-export interface VerifySignedArtifactsOpts {
-  certificateIdentityRegexp: string;
-}
-
-export interface VerifySignedArtifactsResult {
-  bundlePath: string;
-  cosignArgs: Array<string>;
-}
+import {
+  Endpoints,
+  FULCIO_URL,
+  ParsedBundle,
+  REKOR_URL,
+  SEARCH_URL,
+  SignAttestationManifestsOpts,
+  SignAttestationManifestsResult,
+  SignProvenanceBlobsOpts,
+  SignProvenanceBlobsResult,
+  TSASERVER_URL,
+  VerifySignedArtifactsOpts,
+  VerifySignedArtifactsResult,
+  VerifySignedManifestsOpts,
+  VerifySignedManifestsResult
+} from '../types/sigstore/sigstore';

 export interface SigstoreOpts {
  cosign?: Cosign;
@@ -108,19 +80,18 @@ export class Sigstore {
          await core.group(`Signing attestation manifest ${attestationRef}`, async () => {
            // prettier-ignore
            const cosignArgs = [
-            '--verbose',
-            'sign',
-            '--yes',
-            '--oidc-provider', 'github-actions',
-            '--registry-referrers-mode', 'oci-1-1',
-            '--new-bundle-format',
-            '--use-signing-config'
-          ];
+              'sign',
+              '--yes',
+              '--oidc-provider', 'github-actions',
+              '--registry-referrers-mode', 'oci-1-1',
+              '--new-bundle-format',
+              '--use-signing-config'
+            ];
            if (noTransparencyLog) {
              cosignArgs.push('--tlog-upload=false');
            }
            core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-            const execRes = await Exec.getExecOutput('cosign', [...cosignArgs, attestationRef], {
+            const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
              ignoreReturnCode: true,
              silent: true,
              env: Object.assign({}, process.env, {
@@ -135,16 +106,17 @@ export class Sigstore {
                const errorMessages = signResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
                throw new Error(`Cosign sign command failed with errors:\n${errorMessages}`);
              } else {
-                throw new Error(`Cosign sign command failed with exit code ${execRes.exitCode}`);
+                // prettier-ignore
+                throw new Error(`Cosign sign command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
              }
            }
-            const attest = Sigstore.toAttestation(bundleFromJSON(signResult.bundle));
-            if (attest.tlogID) {
-              core.info(`Uploaded to Rekor transparency log: ${SEARCH_URL}?logIndex=${attest.tlogID}`);
+            const parsedBundle = Sigstore.parseBundle(bundleFromJSON(signResult.bundle));
+            if (parsedBundle.tlogID) {
+              core.info(`Uploaded to Rekor transparency log: ${SEARCH_URL}?logIndex=${parsedBundle.tlogID}`);
            }
            core.info(`Signature manifest pushed: https://oci.dag.dev/?referrers=${attestationRef}`);
            result[attestationRef] = {
-              ...attest,
+              ...parsedBundle,
              imageName: imageName
            };
          });
@@ -156,70 +128,114 @@ export class Sigstore {
    return result;
  }

-  public async verifySignedManifests(opts: VerifySignedManifestsOpts, signed: Record<string, SignAttestationManifestsResult>): Promise<Record<string, VerifySignedManifestsResult>> {
+  public async verifySignedManifests(signedManifestsResult: Record<string, SignAttestationManifestsResult>, opts: VerifySignedManifestsOpts): Promise<Record<string, VerifySignedManifestsResult>> {
    const result: Record<string, VerifySignedManifestsResult> = {};
-    const retries = opts.retries ?? 15;
+    for (const [attestationRef, signedRes] of Object.entries(signedManifestsResult)) {
+      await core.group(`Verifying signature of ${attestationRef}`, async () => {
+        const verifyResult = await this.verifyImageAttestation(attestationRef, {
+          certificateIdentityRegexp: opts.certificateIdentityRegexp,
+          noTransparencyLog: opts.noTransparencyLog || !signedRes.tlogID,
+          retryOnManifestUnknown: opts.retryOnManifestUnknown
+        });
+        core.info(`Signature manifest verified: https://oci.dag.dev/?image=${signedRes.imageName}@${verifyResult.signatureManifestDigest}`);
+        result[attestationRef] = verifyResult;
+      });
+    }
+    return result;
+  }

+  public async verifyImageAttestations(image: string, opts: VerifySignedManifestsOpts): Promise<Record<string, VerifySignedManifestsResult>> {
+    const result: Record<string, VerifySignedManifestsResult> = {};
+
+    const attestationDigests = await this.imageTools.attestationDigests(image, opts.platform);
+    if (attestationDigests.length === 0) {
+      throw new Error(`No attestation manifests found for ${image}`);
+    }
+
+    const imageName = image.split(':', 1)[0];
+    for (const attestationDigest of attestationDigests) {
+      const attestationRef = `${imageName}@${attestationDigest}`;
+      const verifyResult = await this.verifyImageAttestation(attestationRef, opts);
+      core.info(`Signature manifest verified: https://oci.dag.dev/?image=${imageName}@${verifyResult.signatureManifestDigest}`);
+      result[attestationRef] = verifyResult;
+    }
+
+    return result;
+  }
+
+  public async verifyImageAttestation(attestationRef: string, opts: VerifySignedManifestsOpts): Promise<VerifySignedManifestsResult> {
    if (!(await this.cosign.isAvailable())) {
      throw new Error('Cosign is required to verify signed manifests');
    }

-    let lastError: Error | undefined;
-    for (const [attestationRef, signedRes] of Object.entries(signed)) {
-      await core.group(`Verifying signature of ${attestationRef}`, async () => {
-        // prettier-ignore
-        const cosignArgs = [
-          '--verbose',
-          'verify',
-          '--experimental-oci11',
-          '--new-bundle-format',
-          '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
-          '--certificate-identity-regexp', opts.certificateIdentityRegexp
-        ];
-        if (!signedRes.tlogID) {
-          // skip tlog verification but still verify the signed timestamp
-          cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
-        }
-        core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-        for (let attempt = 0; attempt < retries; attempt++) {
-          const execRes = await Exec.getExecOutput('cosign', [...cosignArgs, attestationRef], {
-            ignoreReturnCode: true,
-            silent: true,
-            env: Object.assign({}, process.env, {
-              COSIGN_EXPERIMENTAL: '1'
-            }) as {[key: string]: string}
-          });
-          const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
-          if (execRes.exitCode === 0) {
-            result[attestationRef] = {
-              cosignArgs: cosignArgs,
-              signatureManifestDigest: verifyResult.signatureManifestDigest!
-            };
-            lastError = undefined;
-            core.info(`Signature manifest verified: https://oci.dag.dev/?image=${signedRes.imageName}@${verifyResult.signatureManifestDigest}`);
-            break;
-          } else {
-            if (verifyResult.errors && verifyResult.errors.length > 0) {
-              const errorMessages = verifyResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
-              lastError = new Error(`Cosign verify command failed with errors:\n${errorMessages}`);
-              if (verifyResult.errors.some(e => e.code === 'MANIFEST_UNKNOWN')) {
-                core.info(`Cosign verify command failed with MANIFEST_UNKNOWN, retrying attempt ${attempt + 1}/${retries}...\n${errorMessages}`);
-                await new Promise(res => setTimeout(res, Math.pow(2, attempt) * 100));
-              } else {
-                throw lastError;
-              }
-            } else {
-              throw new Error(`Cosign verify command failed: ${execRes.stderr}`);
-            }
-          }
-        }
-      });
-    }
-    if (lastError) {
-      throw lastError;
+    // prettier-ignore
+    const cosignArgs = [
+      'verify',
+      '--experimental-oci11',
+      '--new-bundle-format',
+      '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
+      '--certificate-identity-regexp', opts.certificateIdentityRegexp
+    ];
+    if (opts.noTransparencyLog) {
+      // skip tlog verification but still verify the signed timestamp
+      cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
    }

-    return result;
+    if (!opts.retryOnManifestUnknown) {
+      core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+        ignoreReturnCode: true,
+        silent: true,
+        env: Object.assign({}, process.env, {
+          COSIGN_EXPERIMENTAL: '1'
+        }) as {[key: string]: string}
+      });
+      if (execRes.exitCode !== 0) {
+        // prettier-ignore
+        throw new Error(`Cosign verify command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
+      }
+      const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
+      return {
+        cosignArgs: cosignArgs,
+        signatureManifestDigest: verifyResult.signatureManifestDigest!
+      };
+    }
+
+    const retries = 15;
+    let lastError: Error | undefined;
+    core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+    for (let attempt = 0; attempt < retries; attempt++) {
+      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+        ignoreReturnCode: true,
+        silent: true,
+        env: Object.assign({}, process.env, {
+          COSIGN_EXPERIMENTAL: '1'
+        }) as {[key: string]: string}
+      });
+      const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
+      if (execRes.exitCode === 0) {
+        return {
+          cosignArgs: cosignArgs,
+          signatureManifestDigest: verifyResult.signatureManifestDigest!
+        };
+      } else {
+        if (verifyResult.errors && verifyResult.errors.length > 0) {
+          const errorMessages = verifyResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
+          lastError = new Error(`Cosign verify command failed with errors:\n${errorMessages}`);
+          if (verifyResult.errors.some(e => e.code === 'MANIFEST_UNKNOWN')) {
+            core.info(`Cosign verify command failed with MANIFEST_UNKNOWN, retrying attempt ${attempt + 1}/${retries}...\n${errorMessages}`);
+            await new Promise(res => setTimeout(res, Math.pow(2, attempt) * 100));
+          } else {
+            throw lastError;
+          }
+        } else {
+          // prettier-ignore
+          throw new Error(`Cosign verify command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
+        }
+      }
+    }
+
+    throw lastError;
  }

  public async signProvenanceBlobs(opts: SignProvenanceBlobsOpts): Promise<Record<string, SignProvenanceBlobsResult>> {
@@ -242,28 +258,28 @@ export class Sigstore {
            core.warning(`No subjects found in provenance ${p}, skip signing.`);
            return;
          }
-          const bundle = await signPayload(
+          const bundle = await Sigstore.signPayload(
            {
-              body: blob,
+              data: blob,
              type: INTOTO_MEDIATYPE_PAYLOAD
            },
            endpoints
          );
-          const attest = Sigstore.toAttestation(bundle);
+          const parsedBundle = Sigstore.parseBundle(bundle);
          core.info(`Provenance blob signed for:`);
          for (const subject of subjects) {
            const [digestAlg, digestValue] = Object.entries(subject.digest)[0] || [];
            core.info(`  - ${subject.name} (${digestAlg}:${digestValue})`);
          }
-          if (attest.tlogID) {
-            core.info(`Attestation signature uploaded to Rekor transparency log: ${SEARCH_URL}?logIndex=${attest.tlogID}`);
+          if (parsedBundle.tlogID) {
+            core.info(`Attestation signature uploaded to Rekor transparency log: ${SEARCH_URL}?logIndex=${parsedBundle.tlogID}`);
          }
          core.info(`Writing Sigstore bundle to: ${bundlePath}`);
-          fs.writeFileSync(bundlePath, JSON.stringify(attest.bundle, null, 2), {
+          fs.writeFileSync(bundlePath, JSON.stringify(parsedBundle.payload, null, 2), {
            encoding: 'utf-8'
          });
          result[p] = {
-            ...attest,
+            ...parsedBundle,
            bundlePath: bundlePath,
            subjects: subjects
          };
@@ -275,12 +291,12 @@ export class Sigstore {
    return result;
  }

-  public async verifySignedArtifacts(opts: VerifySignedArtifactsOpts, signed: Record<string, SignProvenanceBlobsResult>): Promise<Record<string, VerifySignedArtifactsResult>> {
+  public async verifySignedArtifacts(signedArtifactsResult: Record<string, SignProvenanceBlobsResult>, opts: VerifySignedArtifactsOpts): Promise<Record<string, VerifySignedArtifactsResult>> {
    const result: Record<string, VerifySignedArtifactsResult> = {};
    if (!(await this.cosign.isAvailable())) {
      throw new Error('Cosign is required to verify signed artifacts');
    }
-    for (const [provenancePath, signedRes] of Object.entries(signed)) {
+    for (const [provenancePath, signedRes] of Object.entries(signedArtifactsResult)) {
      const baseDir = path.dirname(provenancePath);
      await core.group(`Verifying signature bundle ${signedRes.bundlePath}`, async () => {
        for (const subject of signedRes.subjects) {
@@ -293,7 +309,7 @@ export class Sigstore {
            '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
            '--certificate-identity-regexp', opts.certificateIdentityRegexp
          ]
-          if (!signedRes.tlogID) {
+          if (opts.noTransparencyLog || !signedRes.tlogID) {
            // if there is no tlog entry, we skip tlog verification but still verify the signed timestamp
            cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
          }
@@ -359,8 +375,41 @@ export class Sigstore {
    }));
  }

-  // https://github.com/actions/toolkit/blob/d3ab50471b4ff1d1274dffb90ef9c5d9949b4886/packages/attest/src/attest.ts#L90
-  private static toAttestation(bundle: Bundle): Attestation {
+  private static async signPayload(artifact: Artifact, endpoints: Endpoints, timeout?: number, retries?: number): Promise<Bundle> {
+    const witnesses: Witness[] = [];
+
+    const signer = new FulcioSigner({
+      identityProvider: new CIContextProvider('sigstore'),
+      fulcioBaseURL: endpoints.fulcioURL,
+      timeout: timeout,
+      retry: retries
+    });
+
+    if (endpoints.rekorURL) {
+      witnesses.push(
+        new RekorWitness({
+          rekorBaseURL: endpoints.rekorURL,
+          fetchOnConflict: true,
+          timeout: timeout,
+          retry: retries
+        })
+      );
+    }
+
+    if (endpoints.tsaServerURL) {
+      witnesses.push(
+        new TSAWitness({
+          tsaBaseURL: endpoints.tsaServerURL,
+          timeout: timeout,
+          retry: retries
+        })
+      );
+    }
+
+    return new DSSEBundleBuilder({signer, witnesses}).create(artifact);
+  }
+
+  private static parseBundle(bundle: Bundle): ParsedBundle {
    let certBytes: Buffer;
    switch (bundle.verificationMaterial.content.$case) {
      case 'x509CertificateChain':
@@ -375,12 +424,12 @@ export class Sigstore {

    const signingCert = new X509Certificate(certBytes);

-    // Collect transparency log ID if available
+    // collect transparency log ID if available
    const tlogEntries = bundle.verificationMaterial.tlogEntries;
    const tlogID = tlogEntries.length > 0 ? tlogEntries[0].logIndex : undefined;

    return {
-      bundle: bundleToJSON(bundle),
+      payload: bundleToJSON(bundle),
      certificate: signingCert.toString(),
      tlogID: tlogID
    };
--- a/src/types/docker/docker.ts
+++ b/src/types/docker/docker.ts
@@ -69,7 +69,6 @@ export interface ContextInfo {
  Name: string;
  // eslint-disable-next-line @typescript-eslint/no-explicit-any
  Metadata: any;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
  Endpoints: Record<string, EndpointInfo>;
  TLSMaterial: Record<string, Array<string>>;
  Storage: StorageInfo;
--- a/src/types/sigstore/sigstore.ts
+++ b/src/types/sigstore/sigstore.ts
@@ -14,7 +14,67 @@
 * limitations under the License.
 */

+import type {SerializedBundle} from '@sigstore/bundle';
+
+import {Subject} from '../intoto/intoto';
+import {Platform} from '../oci/descriptor';
+
 export const FULCIO_URL = 'https://fulcio.sigstore.dev';
 export const REKOR_URL = 'https://rekor.sigstore.dev';
 export const TSASERVER_URL = 'https://timestamp.sigstore.dev';
 export const SEARCH_URL = 'https://search.sigstore.dev';
+
+export interface Endpoints {
+  fulcioURL: string;
+  rekorURL?: string;
+  tsaServerURL?: string;
+}
+
+export interface ParsedBundle {
+  payload: SerializedBundle;
+  certificate: string;
+  tlogID?: string;
+}
+
+export interface SignAttestationManifestsOpts {
+  imageNames: Array<string>;
+  imageDigest: string;
+  noTransparencyLog?: boolean;
+}
+
+export interface SignAttestationManifestsResult extends ParsedBundle {
+  imageName: string;
+}
+
+export interface VerifySignedManifestsOpts {
+  certificateIdentityRegexp: string;
+  platform?: Platform;
+  noTransparencyLog?: boolean;
+  retryOnManifestUnknown?: boolean;
+}
+
+export interface VerifySignedManifestsResult {
+  cosignArgs: Array<string>;
+  signatureManifestDigest: string;
+}
+
+export interface SignProvenanceBlobsOpts {
+  localExportDir: string;
+  name?: string;
+  noTransparencyLog?: boolean;
+}
+
+export interface SignProvenanceBlobsResult extends ParsedBundle {
+  bundlePath: string;
+  subjects: Array<Subject>;
+}
+
+export interface VerifySignedArtifactsOpts {
+  certificateIdentityRegexp: string;
+  noTransparencyLog?: boolean;
+}
+
+export interface VerifySignedArtifactsResult {
+  bundlePath: string;
+  cosignArgs: Array<string>;
+}
--- a/src/util.ts
+++ b/src/util.ts
@@ -82,7 +82,7 @@ export class Util {
    let url;
    try {
      url = new URL(urlStr);
-    } catch (e) {
+    } catch {
      return false;
    }
    return url.protocol === 'http:' || url.protocol === 'https:';
@@ -115,10 +115,10 @@ export class Util {
    };
  }

-  public static isDirectory(p) {
+  public static isDirectory(p: string) {
    try {
      return fs.lstatSync(p).isDirectory();
-    } catch (_) {
+    } catch {
      // noop
    }
    return false;
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -2,7 +2,8 @@
  "compilerOptions": {
    "esModuleInterop": true,
    "target": "es6",
-    "module": "commonjs",
+    "module": "node16",
+    "isolatedModules": true,
    "strict": true,
    "declaration": true,
    "sourceMap": true,
@@ -18,7 +19,6 @@
    "./__mocks__/**/*",
    "./__tests__/**/*",
    "./lib/**/*",
-    "node_modules",
-    "jest.config*.ts"
+    "node_modules"
  ]
 }
--- a/yarn.lock
+++ b/yarn.lock