actions/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
173 Commits 1 Branch 30 Tags
v2
Commit Graph

24 Commits

Author SHA1 Message Date
Fredrik Skogman
6a89e12864 Add path to created attestation in a well-known summary file (#252) 
* Added a new output file, where the path on local disk to each created
attestation is stored. One attestation per line.

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* Added a section to the readme about the paths file

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>

* store the file in RUNNER_TEMP

* Ignore writing summary file for created attestations if runner_temp is not set.

* prettier updates

---------

Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
 2025-06-11 15:53:32 +02:00
dependabot[bot]
90924a287f Bump the npm-development group with 6 updates (#216) 
* Bump the npm-development group with 6 updates

Bumps the npm-development group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.20.0` | `9.21.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.13.4` | `22.13.5` |
| [eslint](https://github.com/eslint/eslint) | `9.20.1` | `9.21.0` |
| [prettier](https://github.com/prettier/prettier) | `3.5.1` | `3.5.2` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.2.5` | `29.2.6` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.24.1` | `8.25.0` |


Updates `@eslint/js` from 9.20.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.21.0/packages/js)

Updates `@types/node` from 22.13.4 to 22.13.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 9.20.1 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v9.20.1...v9.21.0)

Updates `prettier` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.5.2)

Updates `ts-jest` from 29.2.5 to 29.2.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.5...v29.2.6)

Updates `typescript-eslint` from 8.24.1 to 8.25.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.25.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: typescript-eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <support@github.com>

* rebuild dist

Signed-off-by: Brian DeHamer <bdehamer@github.com>

* fix typos

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com>
 2025-02-25 11:49:37 -08:00
Brian DeHamer
caa5c7e0da clarify plans supporting artifact attestations (#202) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-01-22 06:13:06 -08:00
Brian DeHamer
38bcf9b1c5 New subject-checksums input param (#198) 
* new subject-checksums input param

Signed-off-by: Brian DeHamer <bdehamer@github.com>

* check for valid hex string for digest

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-01-21 10:32:02 -08:00
Brian DeHamer
d94b522220 Fix docs for attestation-url output (#183) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-09 13:42:58 -08:00
Brian DeHamer
63d2e98e26 add note about gh plans supporting attestations (#182) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-09 10:46:52 -08:00
Brian DeHamer
94d0d43131 add attestation-id and attestation-url outputs (#181) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-12-09 09:56:33 -08:00
Brian DeHamer
a2d6fee37e readme updates for v2 release (#173) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-11-21 12:53:27 -08:00
Brian DeHamer
85e94cb741 support multi-subject attestations (#164) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-11-05 09:16:07 -08:00
Brian DeHamer
97f7cf8914 add show-summary input (#108) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-07-30 11:27:18 -07:00
Brian DeHamer
be7daec55a add multi-subject example to docs (#96) 
* add multi-subject example to docs

Signed-off-by: Brian DeHamer <bdehamer@github.com>

* Update README.md

Co-authored-by: Meredith Lancaster <malancas@users.noreply.github.com>

* Update README.md

Co-authored-by: Meredith Lancaster <malancas@users.noreply.github.com>

---------

Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: Meredith Lancaster <malancas@users.noreply.github.com>
 2024-06-19 15:06:47 -07:00
Brian DeHamer
4fa34e85c5 enforce 16MB limit on predicate size (#80) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-06-03 09:41:25 -07:00
Brian DeHamer
9e752e3d76 batch processing w/ exponential backoff (#79) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-06-03 07:56:25 -07:00
Brian DeHamer
12c083815e Bump @sigstore/oci from 0.3.2 to 0.3.3 (#66) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-16 11:25:01 -07:00
Brian DeHamer
c58d52c41d limit attestation subject count (#53) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-06 11:51:42 -07:00
Brian DeHamer
9a8c43656a fix typos in README and action.yml (#52) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-06 11:19:51 -07:00
Brian DeHamer
94082a9d2e add list support for subjectPath input (#51) 
* add list support for subjectPath input

Signed-off-by: Brian DeHamer <bdehamer@github.com>

* bump package version to 1.1.0

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-06 08:32:02 -07:00
Brian DeHamer
52f0592f54 add readme link to gh docs (#48) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-05-01 11:49:15 -07:00
Phill MV
5de47e29f3 Changed cli manual link (#46) 2024-04-30 10:16:14 -04:00
Phill MV
6a7057735b Update README.md to refer to attestations permission (#37) 
* Update README.md to refer to `attestations` permission

* Update ci.yml

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

* Update README.md

Co-authored-by: Brian DeHamer <bdehamer@github.com>

* Update .github/workflows/ci.yml

Co-authored-by: Brian DeHamer <bdehamer@github.com>

---------

Co-authored-by: Brian DeHamer <bdehamer@github.com>
 2024-04-15 11:52:46 -07:00
Brian DeHamer
3b95763d7e more test coverage (#18) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-29 17:02:56 -08:00
Brian DeHamer
2246042d69 readme updates (#16) 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2024-02-28 13:56:23 -08:00
Eugene
6bbf2f4ab0 update readme (#14) 2024-02-28 09:35:04 -08:00
Brian DeHamer
aaaeb08d4e Initial commit 2024-02-20 11:22:22 -08:00