feat(fission/fission): SLSA provenance

[scop]

https://github.com/fission/fission/releases

Does not work for all versions, but then again neither does the whole package entry, old versions are very different from what the registry entry has.

Check List

• Read CONTRIBUTING.md
  • Read OSS Contribution Guide
• All commits are signed
  • This repository enables Require signed commits, so all commits must be signed
• Avoid force push
• Install and execute the package and confirm if the package works well
• Execute cmdx s to scaffold code

[suzuki-shunsuke]

Thank you!

[suzuki-shunsuke]

https://github.com/fission/fission/releases/tag/v1.20.5 doesn't have provenance.
As of https://github.com/fission/fission/releases/tag/v1.21.0-rc1 , provenance was released.

[suzuki-shunsuke]

I'll try to re-scaffold the setting.

cmdx s -B fission/fission

[suzuki-shunsuke]

The original setting was old.
It didn't have version_overrides.
So I re-scaffolded it.

[suzuki-shunsuke]

🎉 https://github.com/aquaproj/aqua-registry/releases/tag/v4.314.0