bump actions/attest from 2.3.0 to 2.4.0 (#654)
Some checks failed
Check Transpiled JavaScript / Check dist/ (push) Failing after 1s
Continuous Integration / TypeScript Tests (push) Failing after 18s
Continuous Integration / Test attest-provenance action (push) Failing after 2s
CodeQL / Analyze (TypeScript) (push) Failing after 2s
Lint Codebase / Lint Codebase (push) Failing after 1s
Public-Good Sigstore Prober / prober (push) Failing after 1s
GitHub Sigstore Prober / prober (push) Failing after 1s

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2025-06-11 10:32:50 -07:00 committed by GitHub
parent 11c67f22cd
commit e8998f9491
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 1 deletions

View File

@ -121,6 +121,10 @@ Attestations are saved in the JSON-serialized [Sigstore bundle][6] format.
If multiple subjects are being attested at the same time, a single attestation
will be created with references to each of the supplied subjects.
The absolute path to the generated attestation is appended to the file
`${RUNNER_TEMP}/created_attestation_paths.txt`. This file will accumulate the
paths to all attestations created over the course of a single workflow.
## Attestation Limits
### Subject Limits

View File

@ -64,7 +64,7 @@ runs:
steps:
- uses: actions/attest-build-provenance/predicate@1176ef556905f349f669722abf30bce1a6e16e01 # predicate@1.1.5
id: generate-build-provenance-predicate
- uses: actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
- uses: actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4.0
id: attest
with:
subject-path: ${{ inputs.subject-path }}