v0.15.0

What's Changed

• feat!: store in-toto provenance outside tar.gz by @leodido in #283
• feat: export SOURCE_DATE_EPOCH for build commands by @leodido in #284
• fix: pass SOURCE_DATE_EPOCH as build arg (+ fix timestamp in export metadata) for deterministic docker images by @leodido in #285
• build(deps): Bump golang.org/x/crypto from 0.42.0 to 0.45.0 by @dependabot[bot] in #287
• feat(docker): use OCI layout for deterministic image caching by @leodido in #286
• fix: extract digest from OCI layout for SLSA provenance by @leodido in #289
• fix: support container extraction with OCI layout export by @leodido in #290
• fix: support SBOM generation with OCI layout export by @leodido in #291
• fix: upload and download provenance bundles in S3 cache by @leodido in #292
• fix: move test coverage collection before packaging phase by @leodido in #294

Full Changelog: v0.14.0...v0.15.0