Commit Graph
20 Commits
Author SHA1 Message Date
Meredith Lancaster 554882dca6 remove unused mocks
Signed-off-by: Meredith Lancaster <[email protected]>
2026-02-05 13:15:37 -08:00
Meredith Lancaster bdb27c47d0 tests handle esm
Signed-off-by: Meredith Lancaster <[email protected]>
2026-02-05 13:09:33 -08:00
Meredith LancasterandGitHub 20eb46ce7a Validate repository org-ownership before storage record creation (#328)
* check if the repository is owned by org before attempting storage record creation

Signed-off-by: Meredith Lancaster <[email protected]>

* linter

Signed-off-by: Meredith Lancaster <[email protected]>

* generate dist

Signed-off-by: Meredith Lancaster <[email protected]>

* add fixtures for repoOwnerIsOrg function

Signed-off-by: Meredith Lancaster <[email protected]>

* formatter

Signed-off-by: Meredith Lancaster <[email protected]>

* clean up fixtures

Signed-off-by: Meredith Lancaster <[email protected]>

* more clean up

Signed-off-by: Meredith Lancaster <[email protected]>

* fix function declaration

Signed-off-by: Meredith Lancaster <[email protected]>

* clean up fixtures

Signed-off-by: Meredith Lancaster <[email protected]>

* add test when repo is not owned by org

Signed-off-by: Meredith Lancaster <[email protected]>

* add more expect statements, clean up mock calls

Signed-off-by: Meredith Lancaster <[email protected]>

* formatter

Signed-off-by: Meredith Lancaster <[email protected]>

* add more spy expect statements

Signed-off-by: Meredith Lancaster <[email protected]>

---------

Signed-off-by: Meredith Lancaster <[email protected]>
2026-01-26 08:31:21 -08:00
7667f588f2 Create Artifact Metadata Storage Record on registry push (#313)
* first pass at creating storage record

Signed-off-by: Meredith Lancaster <[email protected]>

* include storage record param in action config

Signed-off-by: Meredith Lancaster <[email protected]>

* use latest actions/attest version

Signed-off-by: Meredith Lancaster <[email protected]>

* update storage record params

Signed-off-by: Meredith Lancaster <[email protected]>

* include storage record id in result

Signed-off-by: Meredith Lancaster <[email protected]>

* regenerate dist

Signed-off-by: Meredith Lancaster <[email protected]>

* add documentation on storage records

Signed-off-by: Meredith Lancaster <[email protected]>

* log storage record creation

Signed-off-by: Meredith Lancaster <[email protected]>

* add storage record output

Signed-off-by: Meredith Lancaster <[email protected]>

* add new param

Signed-off-by: Meredith Lancaster <[email protected]>

* add storage record id output

Signed-off-by: Meredith Lancaster <[email protected]>

* fix linter errors

Signed-off-by: Meredith Lancaster <[email protected]>

* return all storage record ids

Signed-off-by: Meredith Lancaster <[email protected]>

* bump minor version

Signed-off-by: Meredith Lancaster <[email protected]>

* use expect string match function

Signed-off-by: Meredith Lancaster <[email protected]>

* add try catch block for storage record creation

Signed-off-by: Meredith Lancaster <[email protected]>

* fix table column spacing

Signed-off-by: Meredith Lancaster <[email protected]>

* check for protocol

Signed-off-by: Meredith Lancaster <[email protected]>

* check for artifact url protocol

Signed-off-by: Meredith Lancaster <[email protected]>

* only fill registry_url for now

Signed-off-by: Meredith Lancaster <[email protected]>

* cleanup protocol handling

Signed-off-by: Meredith Lancaster <[email protected]>

* regenerate dist

Signed-off-by: Meredith Lancaster <[email protected]>

* handle subject name correctly

Signed-off-by: Meredith Lancaster <[email protected]>

* move test

Signed-off-by: Meredith Lancaster <[email protected]>

* add back assert statements

Signed-off-by: Meredith Lancaster <[email protected]>

* add back output assert statements

Signed-off-by: Meredith Lancaster <[email protected]>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <[email protected]>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <[email protected]>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <[email protected]>

* use url for subject name parsing

Signed-off-by: Meredith Lancaster <[email protected]>

* add missing test setpu

Signed-off-by: Meredith Lancaster <[email protected]>

* fix storage record fail test

Signed-off-by: Meredith Lancaster <[email protected]>

* regenerate dist

Signed-off-by: Meredith Lancaster <[email protected]>

---------

Signed-off-by: Meredith Lancaster <[email protected]>
Co-authored-by: Copilot <[email protected]>
2025-12-18 11:30:45 -08:00
Brian DeHamerandGitHub 38bcf9b1c5 New subject-checksums input param (#198)
* new subject-checksums input param

Signed-off-by: Brian DeHamer <[email protected]>

* check for valid hex string for digest

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
2025-01-21 10:32:02 -08:00
Brian DeHamerandGitHub 94d0d43131 add attestation-id and attestation-url outputs (#181)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-09 09:56:33 -08:00
Brian DeHamerandGitHub a2d6fee37e readme updates for v2 release (#173)
Signed-off-by: Brian DeHamer <[email protected]>
2024-11-21 12:53:27 -08:00
Brian DeHamerandGitHub 85e94cb741 support multi-subject attestations (#164)
Signed-off-by: Brian DeHamer <[email protected]>
2024-11-05 09:16:07 -08:00
Brian DeHamerandGitHub 97f7cf8914 add show-summary input (#108)
Signed-off-by: Brian DeHamer <[email protected]>
2024-07-30 11:27:18 -07:00
Brian DeHamerandGitHub 9e752e3d76 batch processing w/ exponential backoff (#79)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-03 07:56:25 -07:00
Brian DeHamerandGitHub 3ff4eb4c69 centralize collection of action inputs (#72)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-24 11:01:44 -07:00
Brian DeHamerandGitHub 80d9f23382 process subjects in batches (#67)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-22 07:55:00 -07:00
Brian DeHamerandGitHub b0d8b47eb7 include more detail in error logging (#58)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-09 12:34:01 -07:00
Brian DeHamerandGitHub c58d52c41d limit attestation subject count (#53)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-06 11:51:42 -07:00
Brian DeHamerandGitHub a6dded75c9 bump @actions/attest from 1.1.0 to 1.2.1 (#41)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-25 11:03:54 -07:00
Brian DeHamerandGitHub 3b95763d7e more test coverage (#18)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-29 17:02:56 -08:00
Brian DeHamerandGitHub 32049315c5 enable unit tests in CI (#15)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-28 10:45:31 -08:00
Brian DeHamerandGitHub 525454b125 choose proper sigstore instance when attesting (#11)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-27 16:47:20 -08:00
ejahnGithub e3c685d193 init attest action 2024-02-22 07:53:51 -08:00
Brian DeHamerandGitHub aaaeb08d4e Initial commit 2024-02-20 11:22:22 -08:00