From 46e4ff8b824dc6ae13c8f92c8ba69907e2d39b4e Mon Sep 17 00:00:00 2001
From: Brian DeHamer <bdehamer@github.com>
Date: Wed, 12 Jun 2024 13:55:10 -0700
Subject: [PATCH] bump @actions/attest from 1.2.1 to 1.3.0 (#114)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
---
 __tests__/__snapshots__/main.test.ts.snap |   5 +-
 __tests__/main.test.ts                    |   1 +
 dist/index.js                             | Bin 3162084 -> 3168590 bytes
 dist/licenses.txt                         | Bin 163730 -> 164487 bytes
 package-lock.json                         | 134 +++++++++++-----------
 package.json                              |   4 +-
 6 files changed, 70 insertions(+), 74 deletions(-)

diff --git a/__tests__/__snapshots__/main.test.ts.snap b/__tests__/__snapshots__/main.test.ts.snap
index 7b0e3a8..bf3722e 100644
--- a/__tests__/__snapshots__/main.test.ts.snap
+++ b/__tests__/__snapshots__/main.test.ts.snap
@@ -3,7 +3,7 @@
 exports[`main successfully run main 1`] = `
 {
   "buildDefinition": {
-    "buildType": "https://slsa-framework.github.io/github-actions-buildtypes/workflow/v1",
+    "buildType": "https://actions.github.io/buildtypes/workflow/v1",
     "externalParameters": {
       "workflow": {
         "path": ".github/workflows/main.yml",
@@ -16,6 +16,7 @@ exports[`main successfully run main 1`] = `
         "event_name": "push",
         "repository_id": "repo-id",
         "repository_owner_id": "owner-id",
+        "runner_environment": "github-hosted",
       },
     },
     "resolvedDependencies": [
@@ -29,7 +30,7 @@ exports[`main successfully run main 1`] = `
   },
   "runDetails": {
     "builder": {
-      "id": "https://github.com/actions/runner/github-hosted",
+      "id": "https://github.com/owner/shared/.github/workflows/build.yml@main",
     },
     "metadata": {
       "invocationId": "https://github.com/owner/repo/actions/runs/run-id/attempts/run-attempt",
diff --git a/__tests__/main.test.ts b/__tests__/main.test.ts
index 103c208..b9e7ee0 100644
--- a/__tests__/main.test.ts
+++ b/__tests__/main.test.ts
@@ -25,6 +25,7 @@ describe('main', () => {
     ref: 'refs/heads/main',
     sha: 'babca52ab0c93ae16539e5923cb0d7403b9a093b',
     workflow_ref: 'owner/repo/.github/workflows/main.yml@main',
+    job_workflow_ref: 'owner/shared/.github/workflows/build.yml@main',
     event_name: 'push',
     repository_id: 'repo-id',
     repository_owner_id: 'owner-id',
diff --git a/dist/index.js b/dist/index.js
index ae1d9e25cbfde74b371016acd37cbace6e232236..a46517b4c596a7a25128cade30ef0d3b324a681c 100644
GIT binary patch
delta 8803
zcmcgx3vgT2nI75F)x!_jmi&}sADa*z*|ID<wv*U6jtLIr;n>(t0))i5mabwYdPP@?
zV~lW9+GbdWM<U42vP&MFEi<qS4W#7K-BQBrLOYazA?<e903jizB~V^T+XV{jf9{nm
z$+5F#huO^hj_x_<|Ih#U&VSDN&$+LUt6qNcIn|McrlY;4994YE96b7?;zzSeMxtJy
z`&w`0y68wxz#R&D0}+wh;-0d_^E}ajE8-0X$ZTWc7Z)#{B)8s5tfP@gNNjIx-0F>t
zMn@d3px@eIAo$NGM964RjF3(e5XQ*5fi+YV!aId9{<1k(Pk{Fe%2=<5P-SdqC$Xl9
zvXKc{7!#Nfmgwd~Tu7cRzWaCcHhH2xmp6!#+sT%sMoODw{sd!;ZLv=aiirGRQj@gt
z5wBkmBfLK}%_4KeI^u_$%8ni_J8CT0791HK3x>CQe8I8du;4kmnLeEtzqzfjh?jjO
zIug2jgN;Y;Z`;d3(et@Q(C;$nXgC@O2;pHNu+tk32K+)G(oS4H-s=|~8C}p_U@wXH
zcc}M2oNtPguA-w`I>%ITSC_eH=Jc^GFzHc~qmHic<`#Q|h-<Vjusj&>_`EI@9tlSU
z2pP4-P`$0d5D%}ZiTB>3z5Tt_d)`~ELdrtQMp7ebr1w^Hdalq;T%&?(y9|WY!uU!z
z1j@PcV*}hLDk!Mo)W(_JcU{GmbMi<VG`*rJhGz%45;$=cXGpg0eMz%fS~A3)SAnyZ
z)8(W|fcz59YD;TiGa_Cv4kEu*aLnkLo`8eDtmBNA=(2YkR|d|1#QBf^LSuqIhPfPR
z!+LJsgmn4=&F(BX`6~B0yx=S}X%;PRbuN((_ZS*g`Lf?OAbJOcNO)XQjcQkBX&8o@
z;qYGyESjd)#kLN3`)#gI7YYYm!@l5F;MW^1<*m)wVQ>Wlh;i)kdqn{;fimJptTs4M
zXXfDT*SVYE;A$;5IYF))8tQKzzOJYHnx28-HGRvwhgSBjwP!Xj?^`?6vvz2B=*Iq@
z8C~lJk*)h$>{U932Zy?c)(sA?M2>;A-D`%ie?1QA85rmr$Q&}%*C!13cCWp0c%bL{
zbv=VagPHw_*5RR*y*+*FP<{+!AbViA36~h!$75RPF!17dz(uC>LZ;(rH0*<**I3z<
z;R}@D7Cd~^7qL-=pUOV66Fw3V{GrI&s2|99MKQcIY1V^*n2iROR{Hw}hpZj2BU)a(
z|4qHxno0vK6>Q9KX3902z<-LP@KL3?0zP}uYKkwtAqR@T;_9IP9KzzAJVSLc;~xpS
z$J<FT#PXZyz%Qsd%e6xOSx&pm!}~<RP8u7@2EiH@$S5Ch`@Dgzgz4=SL=udKMZvdI
z5T_GL%;s?MxcVsC#zT$DSh6t*6|^4#<6z#TR@q}#JJ~XS!Y@QdgYFoaKY@OWC7pqv
zDYwLkhxhsfHyJ~4Vh_p|g8^Lg{C)P4T-l3kK5T<emK#dpi`O^{bUtL$!jV-vEs&F3
z4xHYs(!g6std;w#3%F7t91eytw)`0HjS%^31p*iD*_T!2Aq>PayuVeQ#Spq!a3F>v
zQ4y7Y?p&@(FDuWF_yl<5R$_q@ALJY0&?c2$hpUG&z2dLdUjZMVwwu8jHK^fGJgX4y
z8la|0yBvn`z7XzH$@t0AY`7L<24Pny7><aJOl+dbnGGEV4DV2w4~RZKA`qSo2#THr
zH^3m_1M;%$k=^B$@$V8GWN6e|A!0OqzUg@3;1G{+KzUI3wcfPZgAV4C3CxarXGCF0
zECPZIkx_vt?idnwMF{SFfnb11AYPGpg3*B6k;p335lX5DZ@tFNgJmZ<E4*Pe*VK18
zwh9rNu^5t>#m07LlqGn)0m0p2fF~ZTD1%jl>Vn!?xY833Iub6N<W|C;rz(ul_iJ1|
zo%iGyF$AgE!huiT<!a#$l_dv$^J~s%U=t}B8&qSt4SHtC)<7^Uz~0x4m6dGsmkmK!
zF->K!Qe{0u=NG0Lkn${faAJxpglB)ll}*N2B;^QQBSeI-AN6NW;uB6IuAmzmL<I;8
zL~>+A44umtb>jkU-L*@ZQM8j5=VDAX0XK7ROY@SXXQu&((4a~%Y@~B3ODvN^{mI;V
zNn&LBCp$5#W+v55j-&?D645h?aI&;hhE$Sy)~qetymn(S?B{*nTLc*>vZBdMl|&DM
z%+KQj-W3vD5lj#x<H-%EK^~ugkNlgh6lSFS0f+xhQ=(CR-n~~_0l}+{`ZD&7iLG7n
zDCr_iq@6fP40aC|6vGj#QJY|S;sJd*ygXE?Et*JX!z5D-zW%w!0>^(}qAg47blQo-
z;gBapdDmYwRzcN&a`~`&^MYOoJ*HkM4g8kt%gXWyFsY&Q)NEgdMgPU!0Jptv(n7z}
zSORZpj2ygiifgt^kP%)K@RXOx0(QdAY(ZROG1zi@T{V2iV&DvzT@%CLiZ{5nYKlt8
z%O3%lnFeg~ruE#HHKh>L*A~Q&H>#oG6z7CxTh%#GaEhwor{}n0cx;7Q3*Whj`Scc}
zHb*{A>De}-ICA$z+*%GfaLCj}P7lVfIS!t@Q&R-pZ*t9W=a2LEOMm|sw|0h+u`}HI
zG$X5^EElTY;a*QSGGSf9+PRF(J@<bxvIWM!!mTpHQv2NYJ+eZTCpmw|m8-tFf}7vv
zmRc?o1z2+qvs(EJrhGX6DOWvHvD=JV?W{g$Isxj`1OIxb#vt{6z&)peZSSb}OD!L9
z8)x|Y%1^l!Y5tZ$_4EbK_RY=t^98Qu{|{7q5LD9CMQz^g(%CWHSM#KI@7Mjd1~wnl
zl}M)~U0(;ZUeK+OesDo|)VQZBTaRQw%0bFS%0tRWVtoZjg-AtGSGMW#7vV>TR26W?
zDN~j7{t45Wn{$+->;z#a+?uNkE7Wax#FbvGGvA*Je|X4J314y*c`gQgyxq-qs0j-@
z9I1m1`}zil8*%!KV1w&(>rIk(k@@>s8^7&|a4W(yty_p~u}QyQVwSFi)w(P5;P1|w
z4AL{h=7OuC^*&m#=geWVbmnmJAO4z+PJlD_n9AY!cquopw`Zsu)9K*2e<bLmR(51+
zU@D^7ycKqAEj7W^4fE8KY+O5Gf7!hgQ&cF5S2AVSThp_?XU$+c*_b#$T5*pExcRW#
zn!KZ0<qb3SITH1FgmCKH<BN);iO)?6)9RiZQDpL%Jed^PPA-)$3&)PkNt8LTdB$Y&
zT-cmGXH1zhHOcg)fMUAm!&_A%6g;Fd#{>6qEBxLFwJILKvu~O@Y-_-=qD{GHD>4(x
z%@mlDcg+lW2`gq5mbB?_mzFesR&fbe%q?wlhHeR;%_2<pAOa^DvP&=#2u8dvAr<n>
zU|Glba3Iy`4S0g=Yf@gDRxGlN1jRIFcKt|=7V!i-p8CXH2Cp}%?+_nN=M4*D)Sr|!
zE7%lO5h8)fOr;aCoB=eZIu6dTfEj>oNjqdS5>{aIOnaC)*qmXNY}6#SW?H8hhs`sr
zl#RsZOk)*Wu{p!&1ls39W~xRN2FpV#Jp+BW3<QiXL;U3sn)Kb=m|B)DDv63&5JiaM
z*tsPwO_!v&e^xn4Fy@w%VVn}OS>;Rz@NX0~9p+i3DM6oGR9Cun3N&VwBjckzRmMnU
ztW<)@FfW0oStTX0HMdTU={hA5IIAoLkFfivmBnyZLzOnZ{XYGIbZ!Nx8L2XX)=VZP
z1tpM|fN>g^jAhhBm^1NUQV&N`*+2*+x20LvzC4<(x+Is9f{+UvQ@n{Klo*|I7%Kte
z={%5HLu^OI@}EPHjc1xBHVvi}VdE8RNGgIj4WUU1@dr=jK>s}|eOZP8SrvsHntDnr
zVA=O-EbzHeYk+%Ksni-zfZ7b8D#$I>;)R*V1PMC|^NWq>K}Vv2q6|3Pm}l1E4;)Ph
z>|SIphCe-%S6GWp8M_#>Khw<V4N-|u(y}zgQUYXmc?18;nPK)Y5thC9%LEN0bV=0Y
zgo~<V1dUyAc-E9AZ>~Vj9YWcRR19qflRR0<J2)+g?>%9bqh^w$HqFDlgN5a9KVT-5
zobopz%=XNMbi*u~q;n{~NyRvMn3+C<u?G-@PY_Fm>;|_D@9Hu?RGuZ(aQaPc8N76@
zK{uHggQrR?AIrn#Va!Vkm(nxMPe?4e1Tq)PwAYk)&754mil@$7^7S<u4(O7#1K9Yi
zs&>yW50oI4B9%$MJWxL3g3TtAVb7wh3M30sCDJ^kDx_*8f>eW4i*yCje55Op79d%r
zMOieQ4V88Ejqr$uHiL$vuYyUBclEceb`Emvv{`E-UCd%wZl_ebNlWii6(%Yv%SZ8f
zs+W~krPDh4xEj2_s;`iKm`9sb$zn@t2v&YNS*1jrtqb~|(U(gn^XY~x_!DO+WDhLR
zbih^yi>mA9L&K&zEgT%K%aO(lX;wB28}R#rnVR8YGiv>Tnf9<h7Rg;qcj~f87d)}O
zyaH~EQ$2)gX`L*tp^AE-;3loQ;S%*(btN+Don5u>SJC&sWsw#_Pco5(PgzT*wftTa
z!_+s^?T#Ay!nYwvI$uk_)Lka>kDEhSi)EFq4jKM_KMN(iZ>Q(sbXP71$BU>z6@ndA
zbtT!@3H=APX85#$z5_XX?K$vn6E#BCKhdHp-tDGXfW#^yGdCvxO}3E<nEF+{S$f++
zzsLf0Gp);&!=lWFnWhyhR2!OUEvt6IvOX0DcQn%qD0nHKgU6bw4eqhvJpB*SQcy3%
z&w?9Ng)sbsVjZknNUOlvXTvJyjmWlVA)OB&-J-%G))ZE-`##5V>GKOIg}d9aLjT_j
zX(udcp#(Oy&}znJglY@T-+w19g8UQt2*&@gYvK78TCb56gpXTjY5dSXb5Phy9f`KC
zR$45#1)roj;BBRCFbqa5JlaYZK>w3Q4ZPk;%VCN$Xy9M+sSdK+D3+=&)D<gje{I9I
z<*aS$T&^1UHd+ZpZ<E>T;O7n4`?EH*{s^nVA0hS1s*%MZ>jF4lZ77jeEuv91Xs)6!
z<R`1|E0yx^PdeyISo)a_rCf`u={xC0srzbrbC!N5A69C_P_xlkmF-;A3QbpP=BpVa
zkO_55nNmR>-X>zvP7&9E&r&g)#COsc)zXvKP<>%?&E$K<?h#C!(TIS@fUfxAtMIb^
z6DudF*VFUa@~9tMO;Ywv)Rg+F-$aM9ru*(2rb|@t%ImfgIJ<?`851dq0f_yRDtM|k
zE|j69wBU0zFK*y{+XeS>9^WakYMR-AMTXEgwMm;o^Z{iaOc+w3NS*Vb=U&<)?YozD
zsPZyaBRu#NT?`+ss@K55BC3U_Ll_#%K03K*uH12%j7MrZJHdItW`+a%Xih1s($`!n
z20qjqN`QQTx%k<Av|2~Hy2!>&b^_h46iXQl76k|MxuOg`Swa@ziI>q^uQb$gMp^6?
zO2{0%8_x9FNqp)(!&QFN&+6g>cx_3%3E=xOrgVbkYZQU?d4-Aic-MB3uvKcqw*>Yy
z=76U2Rufxa1u8!j3aTrl&-PK5PDQ1g|AB^7g)>4#1UPd$zW<&MXgN4|w~9OV5G~5?
z#IpaGK(+^hW9<J?ekZ>61d_Ajs{&J9es@t`{n&fW&>(RK1u<Zaz^nhRHsPgIepkrY
zXcjC`(s{z@E@n0VM|){C+JiP@30lCaHzqXiPN6?2dUsJ<tg)_c3v@q<Z(8VSPKPXV
zo&wckgGDMkL|s`$%0`$(n2fx;en?Fw$UcU7;o+xfF9d#8&+V}sqewQSI;48Za?JkV
z;_T+y7<3;gDc*D9LpxFfl0!Q2VPo)WRTFeJIe$?)u}!qQkRqbpkN<5Gcj3=nF^Ow-
z_GabFm8{zK+RZJFW``4cTbvW><|apr^iqp6tSZ3knTYSDH~{;x8E$KH?ohQ#AGbL#
G>i!4v!xu6D

delta 3811
zcmcgvdr(tX8lRiT$t4MpkdP1patUHi5=cTtic&x#&<2A@AjMI;7{dip^D_71ql&B3
z8QHpZ`^YR`+o7|zyRB1qr?tiP&Q7hx?rgi;nW~-D*|BdQwOw$x_~<@tr|!uOU2&@I
zwtsA9esk}4&i6RK?|k{rxkq0*LY=!dLG7QfLw9<+?+SRvOLQgFk3;bo$1|+~-x6;}
zuXkB@i+@>@uQ%ZLG4+gfkmnQJBA2UwC=v?CodaQhaA<8Xk#L6MQEQztW82-;bW1}%
z9A!B^7)^Y`mfe(yCwVT_q8~KQygR$RcXoAm_*;523rwxln=587sY1z+AI}B5*yIK_
zNfx<?nH_!n8U0I=RE|+Q!!Q*!)~4n!$sgC6#&gHt!~3%}E&g6_bMJD0ORIN9nj!3<
zkuFvFaZYMu%{<ISxL{>}G8kny#*^!2*6a+&T^Z(;!4MxN`Kla$q2>_;WfzrNn0`ZJ
zNW~j<uw80WjQ_DdK^0|I-|Go@ea*Au4ZG%UNyX|-<EtBgrH0}UkOC&ANc6w^3hod1
zMgl&HKtdoTkP*m*fDdU9Tri;=;UPb|NI}O*`CY=&0Gg!Wg`LO-ZzYgQC|-ezw*XUv
zyg8vkHngsb5As7Cp(l)=L=sA$*{2()Al4=;gz68GIaN8Nfaxhj!)q%wW}pw6b3k(j
znV|d(a^zTj@lY_$+G=CAZiO8$Y4qT%vmq!trO$!gXOJP^x+EUs*%)8hy*a^JZFS-<
z!K-JG7j~R4)PeCVvcr7`^aT_Hy=Rd@<>Uw17{+VkeVZYut}uhsp-{lCvnUrVKcaM?
z*<~`p;#YH(aQH0B1I=Lv4W1R&JaGO-t%vC`GC`d~deELj<xpoaXG7yTqy^tOR0N-N
zDRN-)=ebIg^G3qgCFp!iYn0x$utr$?C2~_j|0k$J0&iYJ9$4@$>VbFviUNv$mJbaw
z_27^zid4=%wm&!&;W@koRvQ$Z;JAWHpkoTT;o*LnOl=KtY_hUxfF!{Ri{3{VemsR#
z;JAd;QhqQDyBj1XiQflJlc*V9okUq`GRisE201p6jKHx;RHGC}#HgcJP_cY@M_0EM
zwojo2q8lizRI27AlksG4)ofxmoMgEKsY%vW2XD{GHNfF3XdZkNG08xCFh>V@7f_YZ
z_9dD}38yZgWwUv<e}=lgo9CV1kK&7;p^G=6cwzb*6s3eBlw3iDuxtvI!L})~nHMf1
z<M-#=lA1i33lp_A8H`;*M{W{+?`71Wxt?J>l#GykX)Bfb|23y#jK(fDm?ULE>X-4e
z>*7f!5+7i~u|9Sa(@!L_|H&}RG0`9?o^WhHR2&FzU}MbsAvU=g*6U0<7sqVL`0=I<
zhnbFq*i{%l&Tu#JpW6R=VGBnb#|Bp2(=f~g0^VkhiT7WRG80z(-!XQV_zZHJW1$&;
zVjLV#KyV^UFJ`A~cKr>zf{CzeLzPP;;!3h<5*ygji^y`zsw|Vo6Fg^w(krMy+&>93
z45gQl;fECJi}M`?RX1VIiAnv|WV-*GOkaGUGo9mMMtpo*HbHY4$?p)8=?jz7@B8GE
zgt;M;wwq>>l!a?%SN<RQ-1D^F1kIO7PkLugZnixc+}IrCgU)C$fpMRWsc#S~b8~Al
z9`(<(3o=eRHM|`$>7bNX7=^sg(IE<6b}CoEM?U3Iq3@q))%9+%0?z*%dA_?_{J^eQ
z0G(G!5BO$lJbV>Z-?9j2wMO%|v_?36M5arha9Jbgzd*wIFBG!-p?ou~5kB8WUoJ)!
zOuCkZPsixLl+qPUe>lRkNm%m=Z4gc#raS7OJ3C7Y^`~hCR9&SPUKfRpSLtVSWoi2n
zvoec7NuVN76J!(Q5abeQ2($!wf?28C|E3^6srzs>JbFOq5jt<vcdFqRm$DQ>L!<sD
z66kHzXTjn|y-K*lqaQ1WiTjH4g^vgHg&xGkL+e<6gxaSUsD1hW_;O^`0Rw@Npg>r4
zz!VHg*;r`gkg<@!Oi)BnOfZL_gn%I^C9n{b5zHkhCzwZI6%HBkRw)da@om8VtH2JA
zoAKM=|CzBAj(hL|B=(g?P%pt)m@dM*DPeRDepV(lmEl%OI64>iNZ_Gbdp*4JAXW<7
ztyn2d?J($|#DNRo89VX%+IB}i6gzMsT(V<39C=-15{URP4X5u{=fhF2O#wZ(<N2xO
zeX`MN+z-!G<M(ehcV7+ugXsUb*CtP!?S_{Z;w-?mc>Kn3fs9|KZ_4C(II#quLzx>A
zeAtYyLfgj<m2i72{z3vP-@+<&cp#SU5abb0LX(MbsrBNybTle<z&hw`wU@$9FSfwM
z0!j(ndng14yoBRNyR1q$;l;M}n+&e)w%Vbr4cpS}V9oq&EqwNro(8rJ&w=Gn$PBPN
zPKb=QVGM~eB!lTUOH}YdZjlO3q{kXqy9%UBalL52cqwKwj+Ww*j5!IA3u{he1jiq+
zs^QvGSP6St?J}4cA}8aarPx6yB0-)UR8d&J3!5Ozhn;ef2RyZ!(x(z95WF(xP{CRs
zu7QLU%gB%d);xe!u+N9hu%<^z!=HS(P>j629cRO|4;x1JYUHrL9hU=c$A*lSryUm&
zt&BPx_fs?weOG45<>Yn}J*dnc-KxxiiMvg5IM$Bm!ovnr5$u23sur@A;UO8^(}f#g
ztI<xwHa~tHDm_Fz)rD6HRXz9(8Js+Y4MKG{UM+z~%k0GmS7S;G0}7i~43aJ;RhVm9
z%f%x@Jd5G9*H)M=F<NMg;z=nyxyYUk7k+Q01@C&Sn=P;BakpgF{5u=)LJE%Eixpts
zW6uHGCQ`g4P&U;ltlflVxn^cC$n^vx>)5^}L2}W|oW$vm6^4NwBe+04dqjAA1V1MF
zzrIqTeHV5Y%hGBvycf67UmK*QLgBr=xRe6JbNDUzsYRJ3&lF?n=easq{3O}j$Ua;m
z_958ew;P2gevL!4@YOg@P};8@iHm7uSS38Nja;&r2jptum%qh%QsMF6;V?;IFVYG5
zhj1Rbe?Le5tBLm=2)_C=*_QS(Lfm=`=Z)+<h6!v0b^?d6^H{~6TB+MI3@>`-=|}46
zN&+W=OQ@&a2@mCl=iA(GNbco?2ba3rCGfX)_mHfr*69}dm${SF;!yZ*Hp!*GsVs|D
zS*mKBRn<<nr6T>dDg7Xt8M&6o_f%NOS6^D&vdB{HOi#k69q#p1wXkxz`wIOZ+yOP?

diff --git a/dist/licenses.txt b/dist/licenses.txt
index 3bb8ed678fd3bfec7d84c410a9f41edbed6cc65f..6f985e361e8ef15c5d449521b7c538f04e41f364 100644
GIT binary patch
delta 45
zcmbRApR>J{tD%K)3)3t^)@0qB{PgJ)KQpRK=H=y^ZW+VmvR&>AV>#3I>4r?deF1}h
B5QhK&

delta 19
acmZo~<(l-Lv!R7?3)3va?foW9KYRgD&j<Jb

diff --git a/package-lock.json b/package-lock.json
index 013ccf3..4fd2952 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "actions/attest-build-provenance",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "actions/attest-build-provenance",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "license": "MIT",
       "dependencies": {
-        "@actions/attest": "^1.2.1",
+        "@actions/attest": "^1.3.0",
         "@actions/core": "^1.10.1"
       },
       "devDependencies": {
@@ -45,16 +45,16 @@
       }
     },
     "node_modules/@actions/attest": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.2.1.tgz",
-      "integrity": "sha512-ZLfmO6o2x3UL2BG++oIHMPx5kApWr8Uy1cgiiafXpHgamsqFUPjUtcp0/gpOaXkxUZftdVno7NwBTisw8qr9UA==",
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.3.0.tgz",
+      "integrity": "sha512-Xmv+HIefU8PMx3q+BwGmL28MLyQ2FF05ROZjH+iuoQ9q43qzmbJmmzou3NBOSspUa1N2nVtirPq7jPj9g8AMEg==",
       "dependencies": {
         "@actions/core": "^1.10.1",
         "@actions/github": "^6.0.0",
         "@actions/http-client": "^2.2.1",
         "@octokit/plugin-retry": "^6.0.1",
-        "@sigstore/bundle": "^2.3.0",
-        "@sigstore/sign": "^2.3.0",
+        "@sigstore/bundle": "^2.3.2",
+        "@sigstore/sign": "^2.3.2",
         "jsonwebtoken": "^9.0.2",
         "jwks-rsa": "^3.1.0"
       }
@@ -1338,17 +1338,17 @@
       }
     },
     "node_modules/@npmcli/agent/node_modules/lru-cache": {
-      "version": "10.2.1",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.1.tgz",
-      "integrity": "sha512-tS24spDe/zXhWbNPErCHs/AGOzbKGHT+ybSBqmdLm8WZ1xXLWvH8Qn71QPAlqVhd0qUTWjy+Kl9JmISgDdEjsA==",
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
+      "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ==",
       "engines": {
         "node": "14 || >=16.14"
       }
     },
     "node_modules/@npmcli/fs": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/@npmcli/fs/-/fs-3.1.0.tgz",
-      "integrity": "sha512-7kZUAaLscfgbwBQRbvdMYaZOWyMEcPTH/tJjnyAWJ/dvvs9Ef+CERx/qJb9GExJpl1qipaDGn7KqHnFGGixd0w==",
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/@npmcli/fs/-/fs-3.1.1.tgz",
+      "integrity": "sha512-q9CRWjpHCMIh5sVyefoD1cA7PkvILqCZsnSOEUUivORLjxCO/Irmue2DprETiNgEqktDBZaM1Bi+jrarx1XdCg==",
       "dependencies": {
         "semver": "^7.3.5"
       },
@@ -1500,11 +1500,11 @@
       }
     },
     "node_modules/@sigstore/bundle": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/@sigstore/bundle/-/bundle-2.3.1.tgz",
-      "integrity": "sha512-eqV17lO3EIFqCWK3969Rz+J8MYrRZKw9IBHpSo6DEcEX2c+uzDFOgHE9f2MnyDpfs48LFO4hXmk9KhQ74JzU1g==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/@sigstore/bundle/-/bundle-2.3.2.tgz",
+      "integrity": "sha512-wueKWDk70QixNLB363yHc2D2ItTgYiMTdPwK8D9dKQMR3ZQ0c35IxP5xnwQ8cNLoCgCRcHf14kE+CLIvNX1zmA==",
       "dependencies": {
-        "@sigstore/protobuf-specs": "^0.3.1"
+        "@sigstore/protobuf-specs": "^0.3.2"
       },
       "engines": {
         "node": "^16.14.0 || >=18.0.0"
@@ -1519,22 +1519,24 @@
       }
     },
     "node_modules/@sigstore/protobuf-specs": {
-      "version": "0.3.1",
-      "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.3.1.tgz",
-      "integrity": "sha512-aIL8Z9NsMr3C64jyQzE0XlkEyBLpgEJJFDHLVVStkFV5Q3Il/r/YtY6NJWKQ4cy4AE7spP1IX5Jq7VCAxHHMfQ==",
+      "version": "0.3.2",
+      "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.3.2.tgz",
+      "integrity": "sha512-c6B0ehIWxMI8wiS/bj6rHMPqeFvngFV7cDU/MY+B16P9Z3Mp9k8L93eYZ7BYzSickzuqAQqAq0V956b3Ju6mLw==",
       "engines": {
         "node": "^16.14.0 || >=18.0.0"
       }
     },
     "node_modules/@sigstore/sign": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-2.3.0.tgz",
-      "integrity": "sha512-tsAyV6FC3R3pHmKS880IXcDJuiFJiKITO1jxR1qbplcsBkZLBmjrEw5GbC7ikD6f5RU1hr7WnmxB/2kKc1qUWQ==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/@sigstore/sign/-/sign-2.3.2.tgz",
+      "integrity": "sha512-5Vz5dPVuunIIvC5vBb0APwo7qKA4G9yM48kPWJT+OEERs40md5GoUR1yedwpekWZ4m0Hhw44m6zU+ObsON+iDA==",
       "dependencies": {
-        "@sigstore/bundle": "^2.3.0",
+        "@sigstore/bundle": "^2.3.2",
         "@sigstore/core": "^1.0.0",
-        "@sigstore/protobuf-specs": "^0.3.1",
-        "make-fetch-happen": "^13.0.0"
+        "@sigstore/protobuf-specs": "^0.3.2",
+        "make-fetch-happen": "^13.0.1",
+        "proc-log": "^4.2.0",
+        "promise-retry": "^2.0.1"
       },
       "engines": {
         "node": "^16.14.0 || >=18.0.0"
@@ -2520,9 +2522,9 @@
       "license": "MIT"
     },
     "node_modules/cacache": {
-      "version": "18.0.2",
-      "resolved": "https://registry.npmjs.org/cacache/-/cacache-18.0.2.tgz",
-      "integrity": "sha512-r3NU8h/P+4lVUHfeRw1dtgQYar3DZMm4/cm2bZgOvrFC/su7budSOeqh52VJIC4U4iG1WWwV6vRW0znqBvxNuw==",
+      "version": "18.0.3",
+      "resolved": "https://registry.npmjs.org/cacache/-/cacache-18.0.3.tgz",
+      "integrity": "sha512-qXCd4rh6I07cnDqh8V48/94Tc/WSfj+o3Gn6NZ0aZovS255bUx8O13uKxRFd2eWG0xgsco7+YItQNPaa5E85hg==",
       "dependencies": {
         "@npmcli/fs": "^3.1.0",
         "fs-minipass": "^3.0.0",
@@ -2550,30 +2552,30 @@
       }
     },
     "node_modules/cacache/node_modules/glob": {
-      "version": "10.3.12",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.3.12.tgz",
-      "integrity": "sha512-TCNv8vJ+xz4QiqTpfOJA7HvYv+tNIRHKfUWw/q+v2jdgN4ebz+KY9tGx5J4rHP0o84mNP+ApH66HRX8us3Khqg==",
+      "version": "10.4.1",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.1.tgz",
+      "integrity": "sha512-2jelhlq3E4ho74ZyVLN03oKdAZVUa6UDZzFLVH1H7dnoax+y9qyaq8zBkfDIggjniU19z0wU18y16jMB2eyVIw==",
       "dependencies": {
         "foreground-child": "^3.1.0",
-        "jackspeak": "^2.3.6",
-        "minimatch": "^9.0.1",
-        "minipass": "^7.0.4",
-        "path-scurry": "^1.10.2"
+        "jackspeak": "^3.1.2",
+        "minimatch": "^9.0.4",
+        "minipass": "^7.1.2",
+        "path-scurry": "^1.11.1"
       },
       "bin": {
         "glob": "dist/esm/bin.mjs"
       },
       "engines": {
-        "node": ">=16 || 14 >=14.17"
+        "node": ">=16 || 14 >=14.18"
       },
       "funding": {
         "url": "https://github.com/sponsors/isaacs"
       }
     },
     "node_modules/cacache/node_modules/lru-cache": {
-      "version": "10.2.1",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.1.tgz",
-      "integrity": "sha512-tS24spDe/zXhWbNPErCHs/AGOzbKGHT+ybSBqmdLm8WZ1xXLWvH8Qn71QPAlqVhd0qUTWjy+Kl9JmISgDdEjsA==",
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
+      "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ==",
       "engines": {
         "node": "14 || >=16.14"
       }
@@ -4846,8 +4848,9 @@
       }
     },
     "node_modules/jackspeak": {
-      "version": "2.3.6",
-      "license": "BlueOak-1.0.0",
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.0.tgz",
+      "integrity": "sha512-JVYhQnN59LVPFCEcVa2C3CrEKYacvjRfqIQl+h8oi91aLYQVWRYbxjPcv1bUiUy/kLmQaANrYfNMCO3kuEDHfw==",
       "dependencies": {
         "@isaacs/cliui": "^8.0.2"
       },
@@ -5873,9 +5876,9 @@
       "license": "ISC"
     },
     "node_modules/make-fetch-happen": {
-      "version": "13.0.0",
-      "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-13.0.0.tgz",
-      "integrity": "sha512-7ThobcL8brtGo9CavByQrQi+23aIfgYU++wg4B87AIS8Rb2ZBt/MEaDqzA00Xwv/jUjAjYkLHjVolYuTLKda2A==",
+      "version": "13.0.1",
+      "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-13.0.1.tgz",
+      "integrity": "sha512-cKTUFc/rbKUd/9meOvgrpJ2WrNzymt6jfRDdwg5UCnVzv9dTpEj9JS5m3wtziXVCjluIXyL8pcaukYqezIzZQA==",
       "dependencies": {
         "@npmcli/agent": "^2.0.0",
         "cacache": "^18.0.0",
@@ -5886,6 +5889,7 @@
         "minipass-flush": "^1.0.5",
         "minipass-pipeline": "^1.2.4",
         "negotiator": "^0.6.3",
+        "proc-log": "^4.2.0",
         "promise-retry": "^2.0.1",
         "ssri": "^10.0.0"
       },
@@ -5990,24 +5994,6 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/markdownlint-cli/node_modules/jackspeak": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.1.2.tgz",
-      "integrity": "sha512-kWmLKn2tRtfYMF/BakihVVRzBKOxz4gJMiL2Rj91WnAB5TPZumSH99R/Yf1qE1u4uRimvCSJfm6hnxohXeEXjQ==",
-      "dev": true,
-      "dependencies": {
-        "@isaacs/cliui": "^8.0.2"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      },
-      "optionalDependencies": {
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
     "node_modules/markdownlint-cli/node_modules/minimatch": {
       "version": "9.0.4",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.4.tgz",
@@ -6113,9 +6099,9 @@
       }
     },
     "node_modules/minipass-fetch": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-3.0.4.tgz",
-      "integrity": "sha512-jHAqnA728uUpIaFm7NWsCnqKT6UqZz7GcI/bDpPATuwYyKwJwW0remxSCxUlKiEty+eopHGa3oc8WxgQ1FFJqg==",
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-3.0.5.tgz",
+      "integrity": "sha512-2N8elDQAtSnFV0Dk7gt15KHsS0Fyz6CbYZ360h0WTYV1Ty46li3rAXVOQj1THMNLdmrD9Vt5pBPtWtVkpwGBqg==",
       "dependencies": {
         "minipass": "^7.0.3",
         "minipass-sized": "^1.0.3",
@@ -6889,6 +6875,14 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
+    "node_modules/proc-log": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-4.2.0.tgz",
+      "integrity": "sha512-g8+OnU/L2v+wyiVK+D5fA34J7EH8jZ8DDlvwhRCMxmMj7UCBvxiO1mGeN+36JXIKF4zevU4kRBd8lVgG9vLelA==",
+      "engines": {
+        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+      }
+    },
     "node_modules/promise-retry": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/promise-retry/-/promise-retry-2.0.1.tgz",
@@ -7401,9 +7395,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/ssri": {
-      "version": "10.0.5",
-      "resolved": "https://registry.npmjs.org/ssri/-/ssri-10.0.5.tgz",
-      "integrity": "sha512-bSf16tAFkGeRlUNDjXu8FzaMQt6g2HZJrun7mtMbIPOddxt3GLMSz5VWUWcqTJUPfLEaDIepGxv+bYQW49596A==",
+      "version": "10.0.6",
+      "resolved": "https://registry.npmjs.org/ssri/-/ssri-10.0.6.tgz",
+      "integrity": "sha512-MGrFH9Z4NP9Iyhqn16sDtBpRRNJ0Y2hNa6D65h736fVSaPCHr4DM4sWUNvVaSuC+0OBGhwsrydQwmgfg5LncqQ==",
       "dependencies": {
         "minipass": "^7.0.3"
       },
diff --git a/package.json b/package.json
index d144a60..ae17496 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "actions/attest-build-provenance",
   "description": "Generate signed build provenance attestations",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "author": "",
   "private": true,
   "homepage": "https://github.com/actions/attest-build-provenance",
@@ -70,7 +70,7 @@
     ]
   },
   "dependencies": {
-    "@actions/attest": "^1.2.1",
+    "@actions/attest": "^1.3.0",
     "@actions/core": "^1.10.1"
   },
   "devDependencies": {