fix: mitigate compromised eMudhra CA trust across AWF

.claude/skills/awf-skill/README.md

@@ -44,8 +44,11 @@ curl -sSL https://raw.githubusercontent.com/github/gh-aw-firewall/main/skill.md
 Before using this skill, ensure AWF is installed:
 
 ```bash
-# Install AWF
-curl -sSL https://raw.githubusercontent.com/github/gh-aw-firewall/main/install.sh | sudo bash
+# Obtain and review install.sh through an independently authenticated channel.
+gh auth status
+export GH_TOKEN="$(gh auth token)"
+sudo --preserve-env=GH_TOKEN bash ./install.sh
+unset GH_TOKEN
 
 # Verify installation
 sudo awf --version

.claude/skills/awf-skill/SKILL.md

@@ -55,10 +55,16 @@ sudo awf --allow-domains github.com --log-level debug -- curl https://api.github
 ### Install Script (Recommended)
 
 ```bash
-curl -sSL https://raw.githubusercontent.com/github/gh-aw-firewall/main/install.sh | sudo bash
+gh auth status
+export GH_TOKEN="$(gh auth token)"
+sudo --preserve-env=GH_TOKEN bash ./install.sh
+unset GH_TOKEN
 sudo awf --version
 ```
 
+Obtain and review `install.sh` through an independently authenticated channel
+before running it. Do not pipe an unauthenticated download into `sudo bash`.
+
 ### Build from Source
 
 ```bash
@@ -216,7 +222,7 @@ sudo awf \
 
 ```yaml
 - name: Setup awf
-  uses: github/gh-aw-firewall@main
+  uses: github/gh-aw-firewall@<reviewed-commit-SHA>
 
 - name: Run with firewall
   run: |

.claude/skills/awf-skill/install.sh

@@ -52,7 +52,9 @@ echo "  - Common workflow examples"
 echo "  - Debugging and troubleshooting guides"
 echo ""
 echo "Prerequisites:"
-echo "  1. Install AWF: curl -sSL https://raw.githubusercontent.com/github/gh-aw-firewall/main/install.sh | sudo bash"
+echo "  1. Obtain and review install.sh independently, authenticate gh, then run:"
+echo "     export GH_TOKEN=\"\$(gh auth token)\""
+echo "     sudo --preserve-env=GH_TOKEN bash ./install.sh"
 echo "  2. Verify: sudo awf --version"
 echo ""
 echo "Claude Code agents in this project can now use AWF effectively!"

.github/workflows/release.yml

@@ -21,7 +21,7 @@ permissions:
   contents: write   # Required for creating releases, pushing version commits and tags
   packages: write   # Required for pushing to GHCR
   id-token: write   # Required for cosign keyless signing
-  attestations: write # Required for Cloud Hypervisor test artifact provenance
+  attestations: write # Required for release and Cloud Hypervisor artifact provenance
 
 jobs:
   bump-version:
@@ -1012,6 +1012,30 @@ jobs:
           cd release
           sha256sum * > checksums.txt
 
+      - name: Bind release tag to checksums
+        env:
+          RELEASE_TAG: ${{ needs.bump-version.outputs.version }}
+        run: |
+          set -euo pipefail
+          [[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]
+          test "$(git rev-parse HEAD)" = "$(git rev-parse "refs/tags/${RELEASE_TAG}^{commit}")"
+          printf '%s  refs/tags/%s\n' "$(sha256sum release/checksums.txt | cut -d ' ' -f1)" \
+            "$RELEASE_TAG" > release/release-identity.txt
+
+      - name: Attest AWF release payloads and metadata
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
+        with:
+          subject-path: |
+            release/awf-linux-x64
+            release/awf-linux-arm64
+            release/awf-darwin-x64
+            release/awf-darwin-arm64
+            release/awf-bundle.js
+            release/awf.tgz
+            release/checksums.txt
+            release/containers.txt
+            release/release-identity.txt
+
       - name: Get previous release tag
         id: previous_tag
         run: |
@@ -1166,6 +1190,7 @@ jobs:
             release/audit.schema.json
             release/token-usage.schema.json
             release/checksums.txt
+            release/release-identity.txt
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}