The attest-build-provenance action now supports attesting multiple subjects simultaneously. When identifying multiple subjects with the subject-path input a single attestation is created with references to each of the supplied subjects, rather than generating separate attestations for each artifact. This reduces the number of attestations that you need to create and manage.
What's Changed
- Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in #319
- Prepare v2.0.0 release by @bdehamer in #321
- Bump
actions/attestfrom 1.4.1 to 2.0.0 (w/ multi-subject attestation support)
- Bump
Full Changelog: v1.4.4...v2.0.0