The attest action now supports attesting multiple subjects simultaneously. When identifying multiple subjects with the subject-path input a single attestation is created with references to each of the supplied subjects, rather than generating separate attestations for each artifact. This reduces the number of attestations that you need to create and manage.
What's Changed
- Bump @actions/core from 1.10.1 to 1.11.1 by @dependabot in #147
- Bump @actions/attest from 1.4.1 to 1.5.0 by @bdehamer in #162
- Bump @sigstore/oci from 0.3.7 to 0.4.0 by @bdehamer in #163
- Support multi-subject attestations by @bdehamer in #164
- Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in #169
- Bump the npm-development group with 4 updates by @dependabot in #174
- Bump csv-parse from 5.5.6 to 5.6.0 by @dependabot in #175
Full Changelog: v1.4.1...v2.0.0
Contributors
bdehamer and dependabot