actions/docker-attest-build-provenance
1
0
Fork 0
mirror of https://github.com/actions/attest-build-provenance.git synced 2025-12-16 12:19:04 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

bump actions attest from 1.1.2 to 1.2.0 (#101)

Browse Source 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2024-06-03 10:49:35 -07:00 committed by GitHub
parent 132fcc796c
commit 49df96e17e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 15 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@ -58,7 +58,8 @@ See [action.yml](action.yml)
- uses: actions/attest-build-provenance@v1 - uses: actions/attest-build-provenance@v1
with: with:
# Path to the artifact serving as the subject of the attestation. Must # Path to the artifact serving as the subject of the attestation. Must
# specify exactly one of "subject-path" or "subject-digest". # specify exactly one of "subject-path" or "subject-digest". May contain a
# glob pattern or list of paths (total subject count cannot exceed 2500).
subject-path: subject-path:
# SHA256 digest of the subject for the attestation. Must be in the form # SHA256 digest of the subject for the attestation. Must be in the form
@ -97,6 +98,15 @@ If multiple subjects are being attested at the same time, each attestation will
be written to the output file on a separate line (using the [JSON Lines][7] be written to the output file on a separate line (using the [JSON Lines][7]
format). format).
## Attestation Limits
### Subject Limits
No more than 2500 subjects can be attested at the same time. Subjects will be
processed in batches 50. After the initial group of 50, each subsequent batch
will incur an exponentially increasing amount of delay (capped at 1 minute of
delay per batch) to avoid overwhelming the attestation API.
## Examples ## Examples
### Identify Subject by Path ### Identify Subject by Path

7
action.yml
View File

@ -8,8 +8,9 @@ branding:
inputs: inputs:
subject-path: subject-path:
description: > description: >
Path to the artifact for which provenance will be generated. Must specify Path to the artifact serving as the subject of the attestation. Must
exactly one of "subject-path" or "subject-digest". specify exactly one of "subject-path" or "subject-digest". May contain a
glob pattern or list of paths (total subject count cannot exceed 2500).
required: false required: false
subject-digest: subject-digest:
description: > description: >
@ -45,7 +46,7 @@ runs:
steps: steps:
- uses: actions/attest-build-provenance/predicate@db1dde0f270afe12073070ac7aa802958ae3ec04 # predicate@1.0.0 - uses: actions/attest-build-provenance/predicate@db1dde0f270afe12073070ac7aa802958ae3ec04 # predicate@1.0.0
id: generate-build-provenance-predicate id: generate-build-provenance-predicate
- uses: actions/attest@12c083815ed46d5d78222e3824f4a26c42c234d3 # v1.1.2 - uses: actions/attest@32795ed9174327efe1734fa6d09c9223658ef225 # v1.2.0
id: attest id: attest
with: with:
subject-path: ${{ inputs.subject-path }} subject-path: ${{ inputs.subject-path }}