add readme link to gh docs (#53)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
2024-05-01 13:58:45 -07:00
parent 5297f161fa
commit f975621746
1 changed files with 4 additions and 0 deletions
@@ -21,6 +21,9 @@ initiated.
 Attestations can be verified using the [`attestation` command in the GitHub
 CLI][7].

+See [Using artifact attestations to establish provenance for builds][11]
+for more information on artifact attestations.
+
 ## Usage

 Within the GitHub Actions workflow which builds some artifact you would like to
@@ -231,3 +234,4 @@ jobs:
  https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto
 [9]: https://jsonlines.org/
 [10]: https://github.com/actions/toolkit/tree/main/packages/glob#patterns
+[11]: https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds