### Software Supply Chain SLSA Level 1 Compliance in the Kubernetes Release Process

Kubernetes releases are now generating provenance attestation files describing the staging and release phases of the release process and artifacts are verified as they are handed over from one phase to the next.

github.com/alexbrainman/sspi v0.0.0-20231016080023-1a75b4708caa/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=
github.com/antithesishq/antithesis-sdk-go v0.4.3-default-no-op h1:+OSa/t11TFhqfrX0EOSqQBDJ0YlpmK0rDSiB19dg9M0=
github.com/antithesishq/antithesis-sdk-go v0.4.3-default-no-op/go.mod h1:IUpT2DPAKh6i/YhSbt6Gl3v2yvUZjmKncl7U91fup7E=

cu
com.cu
edu.cu
gob.cu
inf.cu
nat.cu
net.cu
org.cu

// cv : https://www.iana.org/domains/root/db/cv.html
// https://ola.cv/domain-extensions-under-cv/
// Confirmed by registry <support@ola.cv> 2024-11-26
cv
com.cv
edu.cv
id.cv
int.cv
net.cv
nome.cv
org.cv
publ.cv

// cw : https://www.uoc.cw/cw-registry

    <_comment>Office Open XML Document Template</_comment>
    <glob pattern="*.dotx"/>
    <sub-class-of type="application/x-tika-ooxml"/>
  </mime-type>

  <mime-type type="application/vnd.osa.netdeploy"/>
  <mime-type type="application/vnd.osgi.bundle"/>
  <mime-type type="application/vnd.osgi.dp">
    <glob pattern="*.dp"/>
  </mime-type>
  <mime-type type="application/vnd.otps.ct-kip+xml"/>

F,YACE,mBAAA,OAAA,eAAA,OADF,qBAII,eAAA,EAAA,MAAA,EACA,cAAA,MALJ,uBASI,eAAA,EAAA,MAAA,EACA,cAAA,QAVJ,sBAcI,eAAA,EAAA,MAAA,GAKN,eACE,UAAA,KACA,YAAA,IACA,cAAA,KAGF,iBACE,WAAA,KACA,OAAA,EACA,QAAA,EAHF,oBAMI,MAAA,KACA,UAAA,KACA,YAAA,KACA,aAAA,IATJ,wBhI+olCA,yBAEA,yBADA,yBAFA,yBADA,yBAMA,yBADA,oCgI/nlCM,WAAA,kBAAA,OAAA,IAAA,WAAA,UAAA,OAAA,IAAA,WAAA,UAAA,OAAA,GAAA,CAAA,kBAAA,OAAA,IAnBN,8BhI4plCA,+BAEA,+BADA,+BAFA,+BADA,+BAMA,+BADA,0CuFpulCE,kBAAA,cAAA,UAAA,cyCiGF,eACE,WAAA,IAAA,OAAA,IAGF,gBvHxGM,WAAA,E...