actions/attest

View on GitHub

Action for generating attestations for workflow artifacts

Stars: 166
Forks: 62
Open beginner issues: 0
Indexed issues: 10
Avg merge: 2d 1h
Merged PRs (30d): 12

Dominant language: TypeScript
License: MIT
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

10 open issues indexed

query multiple subject digest (image) in single request Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

actions/attest#497 · Opened Sep 18, 2026
Validate literal `subject-path` entries consistently with other `*-path` inputs Open

actions/attest#489 · 2 comments · 1 assignee · Opened Sep 11, 2026
Support for multiple images with push-to-registry Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

actions/attest#477 · 1 comment · Opened Aug 25, 2026
Single-subject attestations in `actions/attest@v2` Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/attest#213 · 3 comments · Opened Feb 17, 2025
`Continuous Integration`/`Test attest action` fails in forks because it uses `pull_request` Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

actions/attest#204 · Opened Jan 23, 2025
Support custom buildTypes? Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

actions/attest#195 · 2 comments · Opened Jan 9, 2025
in PR checks Error: Failed to get ID token: Error message: Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

actions/attest#184 · 3 comments · Opened Dec 11, 2024
Request for guidance on using `reuse spdx` output with GitHub Attestations in spdx format Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

actions/attest#178 · 1 comment · Opened Dec 4, 2024
Support public signing in private repositories Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

actions/attest#103 · 5 comments · 1 reaction · Opened Jul 9, 2024
Consider naming the generated attestation file `attestation.intoto.json` or allow users to configure it Open

feature-request

Difficulty 4/5 3-5 days Newbie friendliness 52/100

actions/attest#62 · 3 comments · Opened May 10, 2024

actions/attest

Get new issues in your inbox