always set skipWrite to false when generating attestations

This commit is contained in:
Conor Sloan
2024-08-12 09:51:04 +01:00
parent 1a8d07a497
commit 90d59724e7
3 changed files with 4 additions and 97 deletions
Generated Vendored
+2 -5
View File
@@ -104972,11 +104972,8 @@ async function generateAttestation(manifestDigest, semverTag, options) {
subjectDigest: { sha256: subjectDigest },
token: options.token,
sigstore: 'github',
// Attestation storage is only supported for public repositories or repositories which belong to a GitHub Enterprise Cloud account.
// See: https://github.com/actions/toolkit/tree/main/packages/attest#storage
// Since internal repos can only be owned by Enterprises, we'll use this visibility as a proxy for "owned by a GitHub Enterprise Cloud account."
// See: https://docs.github.com/en/enterprise-cloud@latest/repositories/creating-and-managing-repositories/about-repositories#about-internal-repositories
skipWrite: options.repositoryVisibility === 'private'
// Always store the attestation using the GitHub Attestations API
skipWrite: false
});
}
function removePrefix(str, prefix) {