From 49df96e17e918a15956db358890b08e61c704919 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 3 Jun 2024 10:49:35 -0700 Subject: [PATCH] bump actions attest from 1.1.2 to 1.2.0 (#101) Signed-off-by: Brian DeHamer --- README.md | 12 +++++++++++- action.yml | 7 ++++--- 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index a5183c36..e25b8e91 100644 --- a/README.md +++ b/README.md @@ -58,7 +58,8 @@ See [action.yml](action.yml) - uses: actions/attest-build-provenance@v1 with: # Path to the artifact serving as the subject of the attestation. Must - # specify exactly one of "subject-path" or "subject-digest". + # specify exactly one of "subject-path" or "subject-digest". May contain a + # glob pattern or list of paths (total subject count cannot exceed 2500). subject-path: # SHA256 digest of the subject for the attestation. Must be in the form @@ -97,6 +98,15 @@ If multiple subjects are being attested at the same time, each attestation will be written to the output file on a separate line (using the [JSON Lines][7] format). +## Attestation Limits + +### Subject Limits + +No more than 2500 subjects can be attested at the same time. Subjects will be +processed in batches 50. After the initial group of 50, each subsequent batch +will incur an exponentially increasing amount of delay (capped at 1 minute of +delay per batch) to avoid overwhelming the attestation API. + ## Examples ### Identify Subject by Path diff --git a/action.yml b/action.yml index 5e51a564..daf97237 100644 --- a/action.yml +++ b/action.yml @@ -8,8 +8,9 @@ branding: inputs: subject-path: description: > - Path to the artifact for which provenance will be generated. Must specify - exactly one of "subject-path" or "subject-digest". + Path to the artifact serving as the subject of the attestation. Must + specify exactly one of "subject-path" or "subject-digest". May contain a + glob pattern or list of paths (total subject count cannot exceed 2500). required: false subject-digest: description: > @@ -45,7 +46,7 @@ runs: steps: - uses: actions/attest-build-provenance/predicate@db1dde0f270afe12073070ac7aa802958ae3ec04 # predicate@1.0.0 id: generate-build-provenance-predicate - - uses: actions/attest@12c083815ed46d5d78222e3824f4a26c42c234d3 # v1.1.2 + - uses: actions/attest@32795ed9174327efe1734fa6d09c9223658ef225 # v1.2.0 id: attest with: subject-path: ${{ inputs.subject-path }}