build provenance stmt from OIDC claims

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer committed 2024-03-22 12:34:42 -07:00
1 parent dca0c36a52
commit 4de6ecc2c7
12 files changed
+1031 -212

No files matched your search

+4
View File
@@ -1,5 +1,9 @@
# @actions/attest Releases
### 1.1.0
- Updates the `attestProvenance` function to retrieve a token from the GitHub OIDC provider and use the token claims to populate the provenance statement.
### 1.0.0
- Initial release