From bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Wed, 11 Jun 2025 10:44:13 -0700 Subject: [PATCH] bump actions/attest from 2.3.0 to 2.4.0 (#178) Signed-off-by: Brian DeHamer --- README.md | 4 ++++ action.yml | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 4bd7caa..02c3f84 100644 --- a/README.md +++ b/README.md @@ -127,6 +127,10 @@ Attestations are saved in the JSON-serialized [Sigstore bundle][8] format. If multiple subjects are being attested at the same time, a single attestation will be created with references to each of the supplied subjects. +The absolute path to the generated attestation is appended to the file +`${RUNNER_TEMP}/created_attestation_paths.txt`. This file will accumulate the +paths to all attestations created over the course of a single workflow. + ## Attestation Limits ### Subject Limits diff --git a/action.yml b/action.yml index 5e66bbb..d4cf5dc 100644 --- a/action.yml +++ b/action.yml @@ -71,7 +71,7 @@ runs: id: generate-sbom-predicate with: sbom-path: ${{ inputs.sbom-path }} - - uses: actions/attest@v2.3.0 + - uses: actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4.0 id: attest with: subject-path: ${{ inputs.subject-path }}