> no need for compliance enforcement stuff I find github actions works very well for compliance. The ability to create attestations makes it easy to enforce po

> no need for compliance enforcement stuff I find github actions works very well for compliance. The ability to create attestations makes it easy to enforce policies about artifact provenance and integrity and was much easier to get working properly compared to my experience attempting to get jenkins to produce attestations. https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds https://docs.github.com/en/actions/security-for-github-actio... https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/enforcing-artifact-attestations-with-a-kubernetes-admission-controller https://docs.github.com/en/actions/security-for-github-actio... What was your issue with it?