The attest-sbom
action now supports attesting multiple subjects simultaneously. When identifying multiple subjects with the subject-path
input a single attestation is created with references to each of the supplied subjects, rather than generating separate attestations for each artifact. This reduces the number of attestations that you need to create and manage.
What's Changed
- Bump @actions/core from 1.10.1 to 1.11.1 by @dependabot in #110
- Prepare v2.0.0 release by @bdehamer in #126
- Bump
actions/attest
from 1.4.1 to 2.0.0 (w/ multi-subject attestation support)
- Bump
Full Changelog: v1.4.1...v2.0.0