Skip to content

bump @actions/attest from 1.1.0 to 1.2.0#41

Merged
bdehamer merged 1 commit intomainfrom
bdehamer/update-attest
Apr 25, 2024
Merged

bump @actions/attest from 1.1.0 to 1.2.0#41
bdehamer merged 1 commit intomainfrom
bdehamer/update-attest

Conversation

@bdehamer
Copy link
Collaborator

Updates the @actions/attest library from version 1.1.0 to 1.2.0. Importantly, this will result in attestations which use the new v0.3 Sigstore bundle media type.

@bdehamer bdehamer requested a review from a team as a code owner April 23, 2024 19:01
Comment on lines -129 to +128
mediaType: BUNDLE_V02_MEDIA_TYPE,
mediaType: attestation.bundle.mediaType,
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When communicating the media type to the OCI registry, use the value from the attestation itself instead of hard-coding to a specific value.

Comment on lines -66 to +76
nock('https://api.github.com')
.post(/^\/repos\/.*\/.*\/attestations$/)
mockAgent
.get('https://api.github.com')
.intercept({
path: /^\/repos\/.*\/.*\/attestations$/,
method: 'post'
})
Copy link
Collaborator Author

@bdehamer bdehamer Apr 23, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In @actions/attest v1.2.1 there were changes to the way we interact with the GH API which require that we use a different strategy for mocking this interaction.

@bdehamer bdehamer marked this pull request as draft April 23, 2024 19:06
@bdehamer bdehamer force-pushed the bdehamer/update-attest branch 2 times, most recently from aa01c40 to 6caa493 Compare April 25, 2024 14:45
Signed-off-by: Brian DeHamer <bdehamer@github.com>
@bdehamer bdehamer force-pushed the bdehamer/update-attest branch from 6caa493 to 78f77ea Compare April 25, 2024 14:48
@bdehamer bdehamer marked this pull request as ready for review April 25, 2024 16:20
@bdehamer bdehamer merged commit a6dded7 into main Apr 25, 2024
@bdehamer bdehamer deleted the bdehamer/update-attest branch April 25, 2024 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants