bump actions/attest from 2.3.0 to 2.4.0 (#654)
Some checks failed
Check Transpiled JavaScript / Check dist/ (push) Failing after 1s
Continuous Integration / TypeScript Tests (push) Failing after 18s
Continuous Integration / Test attest-provenance action (push) Failing after 2s
CodeQL / Analyze (TypeScript) (push) Failing after 2s
Lint Codebase / Lint Codebase (push) Failing after 1s
Public-Good Sigstore Prober / prober (push) Failing after 1s
GitHub Sigstore Prober / prober (push) Failing after 1s

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2025-06-11 10:32:50 -07:00 committed by GitHub
parent 11c67f22cd
commit e8998f9491
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 1 deletions

View File

@ -121,6 +121,10 @@ Attestations are saved in the JSON-serialized [Sigstore bundle][6] format.
If multiple subjects are being attested at the same time, a single attestation If multiple subjects are being attested at the same time, a single attestation
will be created with references to each of the supplied subjects. will be created with references to each of the supplied subjects.
The absolute path to the generated attestation is appended to the file
`${RUNNER_TEMP}/created_attestation_paths.txt`. This file will accumulate the
paths to all attestations created over the course of a single workflow.
## Attestation Limits ## Attestation Limits
### Subject Limits ### Subject Limits

View File

@ -64,7 +64,7 @@ runs:
steps: steps:
- uses: actions/attest-build-provenance/predicate@1176ef556905f349f669722abf30bce1a6e16e01 # predicate@1.1.5 - uses: actions/attest-build-provenance/predicate@1176ef556905f349f669722abf30bce1a6e16e01 # predicate@1.1.5
id: generate-build-provenance-predicate id: generate-build-provenance-predicate
- uses: actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0 - uses: actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4.0
id: attest id: attest
with: with:
subject-path: ${{ inputs.subject-path }} subject-path: ${{ inputs.subject-path }}