Skip GitHub provenance persistence while the repository is private. Attestations enable automatically after public visibility.
- commit
- ab19ec8f636d273a7a96cb27c78d24399c995c3b
- parent
- e71b0dbde766b5588b3ae13d655c4f0c3e928c48
- author
- Dami <dami.etoile@gmail.com>
| M | .github/ | 2 | ++ |
@@ -111,6 +111,7 @@ jobs:
111111 Remove-Item -Recurse "dist/$name"112112 113113 - name: Attest archive provenance114+ if: github.event.repository.private == false114115 uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4115116 with:116117 subject-path: dist/*@@ -149,6 +150,7 @@ jobs:
149150 sha256sum --check SHA256SUMS150151 151152 - name: Attest checksum manifest153+ if: github.event.repository.private == false152154 uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4153155 with:154156 subject-path: dist/SHA256SUMS