go.mod Vendor SBoM Link This link runs bosh create-release for a given release file, and it generates a tarball and an in-toto attestation of the provenance of that tarball. Build Types