You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Sources/users/Client.swift
+136Lines changed: 136 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -4540,6 +4540,142 @@ public struct Client: APIProtocol {
4540
4540
}
4541
4541
)
4542
4542
}
4543
+
/// List attestations
4544
+
///
4545
+
/// List a collection of artifact attestations with a given subject digest that are associated with repositories owned by a user.
4546
+
///
4547
+
/// The collection of attestations returned by this endpoint is filtered according to the authenticated user's permissions; if the authenticated user cannot read a repository, the attestations associated with that repository will not be included in the response. In addition, when using a fine-grained access token the `attestations:read` permission is required.
4548
+
///
4549
+
/// **Please note:** in order to offer meaningful security benefits, an attestation's signature and timestamps **must** be cryptographically verified, and the identity of the attestation signer **must** be validated. Attestations can be verified using the [GitHub CLI `attestation verify` command](https://cli.github.com/manual/gh_attestation_verify). For more information, see [our guide on how to use artifact attestations to establish a build's provenance](https://docs.github.com/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds).
0 commit comments