actions
/
toolkit
mirror of https://github.com/actions/toolkit
1
0
Fork 0
Code

config rekor to fetch on conflict 

Signed-off-by: Brian DeHamer <bdehamer@github.com>
pull/1759/head
Brian DeHamer 2024-06-12 11:57:18 -07:00
parent 08d6f14ea8
commit dddc440d56
No known key found for this signature in database
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
packages/attest/RELEASES.md
View File

@ -4,6 +4,7 @@
- Dynamic construction of Sigstore API URLs - Dynamic construction of Sigstore API URLs
- Switch to new GH provenance build type - Switch to new GH provenance build type
- Fetch existing Rekor entry on 409 conflict error
- Bump @sigstore/bundle from 2.3.0 to 2.3.2 - Bump @sigstore/bundle from 2.3.0 to 2.3.2
- Bump @sigstore/sign from 2.3.0 to 2.3.2 - Bump @sigstore/sign from 2.3.0 to 2.3.2

1
packages/attest/src/sign.ts
View File

@ -87,6 +87,7 @@ const initBundleBuilder = (opts: SignOptions): BundleBuilder => {
new RekorWitness({ new RekorWitness({
rekorBaseURL: opts.rekorURL, rekorBaseURL: opts.rekorURL,
entryType: 'dsse', entryType: 'dsse',
fetchOnConflict: true,
timeout, timeout,
retry retry
}) })