Skip to content

@actions/attest buildSLSAProvenancePredicate should add inputs into externalParameters #2331

@kohtala

Description

@kohtala

Describe the enhancement
The build result depends on the workflow inputs and these would need to be attested as well.

It would also be useful to be able to add any other external values that contribute into the artifact being attested.

This comes from actions/attest-build-provenance#55. As the actions/attest-build-provenance/predicate action has been discontinued, it has become more difficult to patch this information into the predicate.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions