docs: sign artifacts before releasing #13685

	name: "CodeQL Analysis"

	on:
	workflow_dispatch:
	schedule:
	# ┌───────────── minute (0 - 59)
	# │ ┌───────────── hour (0 - 23)
	# │ │ ┌───────────── day of the month (1 - 31)
	# │ │ │ ┌───────────── month (1 - 12 or JAN-DEC)
	# │ │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
	# │ │ │ │ │
	# │ │ │ │ │
	# │ │ │ │ │
	# * * * * *
	- cron: '30 1 * * *'
	push:
	branches: [ main ]
	pull_request:

	# Declare default permissions as read only.
	permissions: read-all

	jobs:
	CodeQL-Build:
	permissions:
	security-events: write
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	# Initializes the CodeQL tools for scanning.
	- name: Initialize CodeQL
	uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
	with:
	languages: go

	- name: Autobuild
	uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2

Provide feedback