Discover GitHub Attestations

[behnazh-w]

We currently support GitHub Attestations when they are provided as input, but we do not yet implement automatic discovery of these attestations.

For example, here is a Java library that generates GitHub Attestations:

• pkg:maven/io.liftwizard/liftwizard-reladomo-operation-compiler@2.1.21
• GitHub Attestation: https://github.com/liftwizard/liftwizard/attestations/2827088