Release 0.6.8

What's Changed

• _cli: add boolean envvar defaults by @woodruffw in #244
• build(deps): bump sigstore from 0.6.6 to 0.6.7 in /install by @dependabot in #246
• build(deps): bump cryptography from 38.0.1 to 38.0.2 in /install by @dependabot in #245
• build(deps): bump securesystemslib from 0.24.0 to 0.25.0 in /install by @dependabot in #254
• test: add an ambient_oidc marker by @woodruffw in #259
• Restore SLSA provenance generator by @di in #256
• add community-wide reusable workflow for license/vuln scan by @bobcallaway in #255
• ctfe: add staging targets by @asraa in #262
• fix deprecated set-output by @bobcallaway in #270
• sigstore: add a CT keyring, use it for SCT verification by @woodruffw in #267
• sigstore: 0.6.8 by @woodruffw in #284

New Contributors

• @bobcallaway made their first contribution in #255

Full Changelog: v0.6.7...v0.6.8