@sentry/cli-linux-i686

Build provenancecaution

No build attestation or trusted publisher identity was reported for the release. The active organization repository and security tooling provide useful compensating evidence, but the artifact’s publication and build chain remain less independently verifiable.

Token permissionscaution

Ten workflows lack top-level permission declarations, and three declare top-level write permissions; only three use job-level permissions. This leaves avoidable ambiguity and broader token access in parts of the build and release automation.