Added
- Artifact Hub listing. The chart is now discoverable on artifacthub.io.
charts/perf-sentinel/artifacthub-repo.ymldocuments the repository ownership and is pushed to the OCI registry under the specialartifacthub.iotag on every release.Chart.yamlnow carriesartifacthub.io/*annotations (category, license, links, images). - SPDX SBOM per release. Every chart release ships a Syft-generated SPDX SBOM as a GitHub Release asset, attested via
actions/attestwith the SBOM predicate and verifiable throughgh attestation verify --predicate-type https://spdx.dev/Document/v2.3.
Changed
docs/HELM-DEPLOYMENT.md(and its French parity) gains an Artifact Hub section, an SBOM verification subsection, and an OCI-basedgh attestation verify oci://...recipe alongside the existing tarball-based one.