From f1185f1959cdaeda41a7f5a7b43cbe6b58a7a793 Mon Sep 17 00:00:00 2001
From: Brian DeHamer <bdehamer@github.com>
Date: Thu, 5 Sep 2024 10:04:26 -0700
Subject: [PATCH] bump @actions/attest from 1.4.1 to 1.4.2 (#225)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
---
 dist/index.js     | Bin 2924980 -> 2924631 bytes
 package-lock.json |  12 ++++++------
 package.json      |   4 ++--
 src/main.ts       |  27 +--------------------------
 4 files changed, 9 insertions(+), 34 deletions(-)

diff --git a/dist/index.js b/dist/index.js
index 6d1cf4d4b620fb51a952399d6f59c4413c138df8..72119d868ce9a53793a33a167ce6780a6894c9d3 100644
GIT binary patch
delta 500
zcmZwC&o2W(6bJAWMO#|c*3YWfRa)9|lyGt*xM-zUlkJpAw%cZRRy5K$ApH}@!NtK{
zMA9qaLi8r_ceps>s~j9m@|pKC^D^_^&Hc6O_4e9z^_iaV5>|b7xgAA`Qt>LQ85LHX
z7q+e5-hI(XaucaAcS%FkNH>@$C)LMCWJuK)-JT<yI^3dMeq}44qrzH#mE;~Leo*DQ
z<VE_u-`?6FSs|wD6~~lRs#xtm7Z%#pC8kRx?0e(1&kToCnbk;`y5ST#F_X9{xmC4<
z&9gS17A2vRZ8)jje|w*|C9|Ym5OOc|(}B8p)?zBK8ums1OtM6Y!#^X}cU17SBdl5v
ze(!NM)5vCA&;gy$1#aku9_R%Rc)<sK&<}nHzyJhc5JC`!2n@k6jKC<2!8k-=0%9-;
y1o37zqZ#MQ{ivO(yGQM$x&EXrx>UN+6KY(xG?;<}Ov4N$AqBHA*Su_{1212xlc*^G

delta 283
zcmXZWKW_nX0LJnBPM!MKqe_+H`qP#xm)JUpT_<nh77>XBHCh-<rViJ^(sv*#xwVan
z7$x?`>nPvgNj}4qXL+_iGcjMx#B^VX7k&CU&2G0>?;LC2C=V@jWSIgAT)2Q6Dm=J^
z7e4qAKoD2Z5JDK&h~NfM#Bhr^?vOwd_edd)40Jp=mMI65k9n?T|1IUGT~jnQdU~o?
z^hW*t?f5!xl<oFPj@8rT{IBGz`2H$|6npn8BBSbBB8x{n;TbvPVc^B7t_#}c0Dt3P
A#sB~S

diff --git a/package-lock.json b/package-lock.json
index 3ec3b46..ec69cc8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "actions/attest-build-provenance",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "actions/attest-build-provenance",
-      "version": "1.1.2",
+      "version": "1.1.3",
       "license": "MIT",
       "dependencies": {
-        "@actions/attest": "^1.4.1",
+        "@actions/attest": "^1.4.2",
         "@actions/core": "^1.10.1"
       },
       "devDependencies": {
@@ -45,9 +45,9 @@
       }
     },
     "node_modules/@actions/attest": {
-      "version": "1.4.1",
-      "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.4.1.tgz",
-      "integrity": "sha512-IEwE9SxHUGZUogp7s9nb8KCcj+83VQ62TR7r6J/HUh94KN+nU+V9AvqnEg1sGCKmFo9BUVX8lV7D+M2tdfVxaw==",
+      "version": "1.4.2",
+      "resolved": "https://registry.npmjs.org/@actions/attest/-/attest-1.4.2.tgz",
+      "integrity": "sha512-VCE5xFPexHc/iBD77b5Rip1ClYFF5j6vE7HxNxFga4OUnRwM6gXdObcz4cDRJsyp6ud4BgEqFUJYNinMnpPYMQ==",
       "dependencies": {
         "@actions/core": "^1.10.1",
         "@actions/github": "^6.0.0",
diff --git a/package.json b/package.json
index a972305..f62d148 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "actions/attest-build-provenance",
   "description": "Generate signed build provenance attestations",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "author": "",
   "private": true,
   "homepage": "https://github.com/actions/attest-build-provenance",
@@ -70,7 +70,7 @@
     ]
   },
   "dependencies": {
-    "@actions/attest": "^1.4.1",
+    "@actions/attest": "^1.4.2",
     "@actions/core": "^1.10.1"
   },
   "devDependencies": {
diff --git a/src/main.ts b/src/main.ts
index f623157..0b1f21a 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -1,21 +1,14 @@
 import { buildSLSAProvenancePredicate } from '@actions/attest'
 import * as core from '@actions/core'
 
-const VALID_SERVER_URLS = [
-  'https://github.com',
-  new RegExp('^https://[a-z0-9-]+\\.ghe\\.com$')
-] as const
-
 /**
  * The main function for the action.
  * @returns {Promise<void>} Resolves when the action is complete.
  */
 export async function run(): Promise<void> {
   try {
-    const issuer = getIssuer()
-
     // Calculate subject from inputs and generate provenance
-    const predicate = await buildSLSAProvenancePredicate(issuer)
+    const predicate = await buildSLSAProvenancePredicate()
 
     core.setOutput('predicate', predicate.params)
     core.setOutput('predicate-type', predicate.type)
@@ -25,21 +18,3 @@ export async function run(): Promise<void> {
     core.setFailed(error.message)
   }
 }
-
-// Derive the current OIDC issuer based on the server URL
-function getIssuer(): string {
-  const serverURL = process.env.GITHUB_SERVER_URL || 'https://github.com'
-
-  // Ensure the server URL is a valid GitHub server URL
-  if (!VALID_SERVER_URLS.some(valid_url => serverURL.match(valid_url))) {
-    throw new Error(`Invalid server URL: ${serverURL}`)
-  }
-
-  let host = new URL(serverURL).hostname
-
-  if (host === 'github.com') {
-    host = 'githubusercontent.com'
-  }
-
-  return `https://token.actions.${host}`
-}