actions
/
toolkit
mirror of https://github.com/actions/toolkit
1
0
Fork 0
Code

Merge pull request #1759 from actions/bdehamer/rekor-409 

config rekor to fetch on conflict
pull/1704/merge
Brian DeHamer 2024-06-12 12:25:06 -07:00 committed by GitHub
parent 08d6f14ea8 dddc440d56
commit 361a115e53
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
packages/attest/RELEASES.md
View File

@ -4,6 +4,7 @@
- Dynamic construction of Sigstore API URLs - Dynamic construction of Sigstore API URLs
- Switch to new GH provenance build type - Switch to new GH provenance build type
- Fetch existing Rekor entry on 409 conflict error
- Bump @sigstore/bundle from 2.3.0 to 2.3.2 - Bump @sigstore/bundle from 2.3.0 to 2.3.2
- Bump @sigstore/sign from 2.3.0 to 2.3.2 - Bump @sigstore/sign from 2.3.0 to 2.3.2

1
packages/attest/src/sign.ts
View File

@ -87,6 +87,7 @@ const initBundleBuilder = (opts: SignOptions): BundleBuilder => {
new RekorWitness({ new RekorWitness({
rekorBaseURL: opts.rekorURL, rekorBaseURL: opts.rekorURL,
entryType: 'dsse', entryType: 'dsse',
fetchOnConflict: true,
timeout, timeout,
retry retry
}) })