From 4790ff9334bee39064c76c36752c6f330bcfcfce Mon Sep 17 00:00:00 2001 From: Meredith Lancaster Date: Fri, 9 Jan 2026 11:29:10 -0800 Subject: [PATCH] reorganize storage record section Signed-off-by: Meredith Lancaster --- README.md | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index b8e9a62..d9519c0 100644 --- a/README.md +++ b/README.md @@ -253,16 +253,6 @@ the specific image being attested is identified by the supplied digest. Attestation bundles are stored in the OCI registry according to the [Cosign Bundle Specification][10]. -#### Artifact Metadata Storage Records - -If the `push-to-registry` option is set to true, the Action will also -emit an [Artifact Metadata Storage Record](https://docs.github.com/en/rest/orgs/artifact-metadata?apiVersion=2022-11-28#create-artifact-metadata-storage-record). -Storage records enrich artifact metadata by capturing storage -related details, such as which registry an image is hosted on -and whether its still active on that registry. - -If you do not want to emit a storage record, set `create-storage-record` to `false`. - > **NOTE**: When pushing to Docker Hub, please use "index.docker.io" as the > registry portion of the image name. @@ -310,6 +300,16 @@ jobs: push-to-registry: true ``` +#### Artifact Metadata Storage Records + +If the `push-to-registry` option is set to true, the Action will also +emit an [Artifact Metadata Storage Record](https://docs.github.com/en/rest/orgs/artifact-metadata?apiVersion=2022-11-28#create-artifact-metadata-storage-record). +Storage records enrich artifact metadata by capturing storage +related details, such as which registry an image is hosted on +and whether its still active on that registry. + +If you do not want to emit a storage record, set `create-storage-record` to `false`. + ### Integration with `actions/upload-artifact` If you'd like to create an attestation for an archive created with the