actions/attest
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
96 Commits 1 Branch 0 Tags
6b1ea9ea05110ce390f64da5331bee5e839009e9
Commit Graph
96 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Meredith Lancaster 6b1ea9ea05 linter fix 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-09 08:32:31 -08:00
Meredith Lancaster 290dbce022 fix expected endpoint response 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-09 08:02:38 -08:00
Meredith Lancaster cc01df9878 regenerate package lock 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 19:22:04 -08:00
Meredith Lancaster 3abe27bec2 bump to next minor version 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 19:19:29 -08:00
Meredith Lancaster b168e2c6ee formatting 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 19:19:11 -08:00
Meredith LancasterandCopilot 38b848d6df Update packages/attest/src/artifactMetadata.ts 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-12-08 16:30:37 -08:00
Meredith LancasterandCopilot 52b6273f1d Update packages/attest/README.md 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-12-08 16:30:25 -08:00
Meredith Lancaster 707729fc18 fix linter issues 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 16:22:59 -08:00
Meredith Lancaster 81160137d2 fix test and function calls 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 15:59:25 -08:00
Meredith Lancaster 30b6f098fb add back param parsing function 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 15:39:26 -08:00
Meredith Lancaster 3292a4a180 fix test calls 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 15:33:01 -08:00
Meredith Lancaster 94855dbe20 reorganize function options and document 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 15:25:34 -08:00
Meredith Lancaster 0056116f2b rename file 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 15:16:26 -08:00
Meredith Lancaster c0685c52bb fix header link 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 14:07:17 -08:00
Meredith Lancaster 23eec1d1a6 fix expected response 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 14:03:23 -08:00
Meredith Lancaster b3995c18c7 add section on createStorageRecord func 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 13:57:00 -08:00
Meredith Lancaster d14e58dda3 table of contents 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 13:55:24 -08:00
Meredith Lancaster dd67f5558b fix function exporting and test results 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 13:49:54 -08:00
Meredith Lancaster 8dbe4a812c regenerate package lock 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 13:17:18 -08:00
Meredith Lancaster 6e6225d5f6 use parameter objects and add tests 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 13:17:08 -08:00
Meredith Lancaster 5e31c53ace condense parameters 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 11:02:59 -08:00
Meredith Lancaster 9539aaeaae add function for creating storage record 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2025-12-08 10:49:24 -08:00
Tingting Wang 4e60acb6d0 Merge pull request #2174 from actions/dependabot/npm_and_yarn/packages/attest/tar-7.5.2 
Bump tar from 7.5.1 to 7.5.2 in /packages/attest
 2025-12-05 17:13:09 -08:00
dependabot[bot] b8d55263b1 Bump tar from 7.5.1 to 7.5.2 in /packages/attest 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.1 to 7.5.2.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.1...v7.5.2)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-06 01:06:03 +00:00
Tingting Wang 59945ba9e4 Merge pull request #2187 from actions/dependabot/npm_and_yarn/packages/attest/glob-10.5.0 
Bump glob from 10.4.5 to 10.5.0 in /packages/attest
 2025-12-05 17:04:14 -08:00
dependabot[bot] 6754e24d5e Bump glob from 10.4.5 to 10.5.0 in /packages/attest 
Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-19 17:36:35 +00:00
Salman Chishti 44495c626d Merge pull request #2164 from actions/prepare-attest-2.0.0-release 
Prepare @actions/attest 2.0.0 release
 2025-10-21 15:08:28 +01:00
Salman Muin Kayser Chishti ac12f586ff Prepare @actions/attest 2.0.0 release 2025-10-20 12:07:20 +01:00
Eugene 3146c995c4 Merge pull request #2160 from actions/ejahnGithub-patch-1 
Remove unnecessary Buffer to Uint8Array conversion
 2025-10-16 12:22:23 -04:00
Eugene e7fe163107 Remove unnecessary Buffer to Uint8Array conversion 
Removed unnecessary conversion of Buffer to Uint8Array for compatibility.
 2025-10-16 12:08:05 -04:00
Salman Chishti 50b052442c Support Nodejs.24 - Merge pull request #2110 from actions/salmanmkc/node24 
Support Node.js 24
 2025-10-16 16:25:47 +01:00
Salman Muin Kayser Chishti e98c2154a1 remove skip lib check 2025-10-15 16:28:21 +01:00
Salman Muin Kayser Chishti 163c6493df package json 2025-10-15 16:27:29 +01:00
Salman Muin Kayser Chishti bfa8a2566b Keep attest at the same version 2025-10-15 16:27:29 +01:00
Salman Muin Kayser Chishti a160d5b10c update with dist updates 2025-10-15 16:22:51 +01:00
Salman Muin Kayser Chishti 872b8161ee linting 2025-09-04 15:24:57 +01:00
Salman Muin Kayser Chishti 8209fc5475 package updates 2025-09-04 15:15:02 +01:00
Salman Muin Kayser Chishti 11e9c0b54c Bump package versions, and fix issues 2025-09-04 14:16:27 +01:00
Brian DeHamer 30ca54a683 Merge pull request #2058 from actions/dependabot/npm_and_yarn/packages/attest/undici-5.29.0 
Bump undici from 5.28.5 to 5.29.0 in /packages/attest
 2025-05-25 16:30:11 -07:00
dependabot[bot] 3cd98a77ca Bump undici from 5.28.5 to 5.29.0 in /packages/attest 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 5.29.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-15 16:30:57 +00:00
Brian DeHamer f8cf7bb47e Merge pull request #2045 from actions/dependabot/npm_and_yarn/packages/attest/octokit/endpoint-9.0.6 
Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest
 2025-05-08 10:47:59 -07:00
Brian DeHamer 932d8d1b67 Merge pull request #2044 from actions/dependabot/npm_and_yarn/packages/attest/octokit/request-error-5.1.1 
Bump @octokit/request-error from 5.1.0 to 5.1.1 in /packages/attest
 2025-05-08 10:47:20 -07:00
dependabot[bot] 5b044c3671 Bump @octokit/request-error from 5.1.0 to 5.1.1 in /packages/attest 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 5.1.0 to 5.1.1.
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v5.1.0...v5.1.1)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-version: 5.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-08 11:19:50 +00:00
dependabot[bot] 36d77f99f9 Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest 
Bumps [@octokit/endpoint](https://github.com/octokit/endpoint.js) from 9.0.5 to 9.0.6.
- [Release notes](https://github.com/octokit/endpoint.js/releases)
- [Commits](https://github.com/octokit/endpoint.js/compare/v9.0.5...v9.0.6)

---
updated-dependencies:
- dependency-name: "@octokit/endpoint"
  dependency-version: 9.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-08 11:19:48 +00:00
Brian DeHamer 17259fc82d set workflow.ref provenance field from ref claim 
Updates the `buildSLSAProvenancePredicate` function to populate the
`workflow.ref` field from the `ref` claim in the OIDC token.

Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-02-26 08:47:27 -08:00
Brian DeHamer 4226953ba4 bump undici to 5.28.5 
Signed-off-by: Brian DeHamer <bdehamer@github.com>
 2025-02-14 08:02:10 -08:00
Bassem Dghaidi 5156412c00 Merge pull request #1857 from actions/neo-cache-service 
Integrate cache service v2
 2024-11-22 19:22:23 +01:00
Bassem Dghaidi cf56a4d6ad Post merge cleanup 2024-11-14 02:04:20 -08:00
Bassem Dghaidi a6563809e5 Merge branch 'main' into neo-cache-service 2024-11-14 02:02:55 -08:00
Brian DeHamer 83ea5e6805 Merge pull request #1870 from actions/bdehamer/attest-1.5-release-notes 
`@actions/attest`: Release notes for v1.5.0 release
 2024-11-01 09:55:13 -07:00