build provenance stmt from OIDC claims

Signed-off-by: Brian DeHamer <[email protected]>
2024-03-22 12:34:42 -07:00
parent ef77c9d60b
commit a0e6af1e53
12 changed files with 1031 additions and 212 deletions
@@ -1,5 +1,9 @@
 # @actions/attest Releases

+### 1.1.0
+
+- Updates the `attestProvenance` function to retrieve a token from the GitHub OIDC provider and use the token claims to populate the provenance statement.
+
 ### 1.0.0

 - Initial release