From bfc4aecb6d91898cee30d6d9d1e004e6160a23e4 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 20 Jun 2024 08:26:17 -0700 Subject: [PATCH] add multi-subject examples to readme (#76) * add multi-subject examples to readme Signed-off-by: Brian DeHamer * Update README.md Co-authored-by: Meredith Lancaster * Update README.md Co-authored-by: Meredith Lancaster --------- Signed-off-by: Brian DeHamer Co-authored-by: Meredith Lancaster --- README.md | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index f30f34d..eb0c765 100644 --- a/README.md +++ b/README.md @@ -158,7 +158,7 @@ jobs: sbom-path: 'sbom.spdx.json' ``` -### Identify Subjects by Wildcard +### Identify Multiple Subjects If you are generating multiple artifacts, you can generate an attestation for each by using a wildcard in the `subject-path` input. @@ -173,6 +173,23 @@ each by using a wildcard in the `subject-path` input. For supported wildcards along with behavior and documentation, see [@actions/glob][10] which is used internally to search for files. +Alternatively, you can explicitly list multiple subjects with either a comma or +newline delimited list: + +```yaml +- uses: actions/attest-sbom@v1 + with: + subject-path: 'dist/foo, dist/bar' +``` + +```yaml +- uses: actions/attest-sbom@v1 + with: + subject-path: | + dist/foo + dist/bar +``` + ### Container Image When working with container images you can invoke the action with the