Feature/add slsa and mvr info #128
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR introduces SLSA (Supply-chain Levels for Software Artifacts) compliance and MVR (Move Verification Registry) provenance for verified package publishing. It also updates the Sui compiler version and refines CI workflows.
Key Changes
.github/workflows/publish_package.ymlthat utilizes thesui-mvr-provenanceaction for secure, verified deployments with SLSA Level 3 compliance.packages/deeptrade-core/mvr.config.jsonto configure registry metadata (name, description, contact info, etc.) for the MVR.1.56.2to1.62.1across CI configurations (move_test.yml) and the project lockfile..github/workflows/move_test.ymlto specifically target relevant Move and workflow file changes.deeptrade_coreaddress to0x0inMove.toml, following deployment best practices for upgrades and new builds.Move.lockwith the new compiler version and latest framework revisions.Move.lockto ensure a clean build state.packages/deeptrade-core/README.mdto consolidate documentation within the repository root.