bump actions/attest from 1.3.3 to 1.4.0 (#85)

Signed-off-by: Brian DeHamer <[email protected]>

README.md

@@ -86,6 +86,10 @@ See [action.yml](action.yml)
  # the "subject-digest" parameter be specified. Defaults to false.
  push-to-registry:
 
+ # Whether to attach a list of generated attestations to the workflow run
+ # summary page. Defaults to true.
+ show-summary:
+
  # The GitHub token used to make authenticated API requests. Default is
  # ${{ github.token }}
  github-token:

action.yml

@@ -35,6 +35,12 @@ inputs:
  and that the "subject-digest" parameter be specified. Defaults to false.
  default: false
  required: false
+ show-summary:
+ description: >
+ Whether to attach a list of generated attestations to the workflow run
+ summary page. Defaults to true.
+ default: true
+ required: false
  github-token:
  description: >
  The GitHub token used to make authenticated API requests.
@@ -53,7 +59,7 @@ runs:
  id: generate-sbom-predicate
  with:
  sbom-path: ${{ inputs.sbom-path }}
- - uses: actions/attest@7305951e905fb742188aa16c1d23409b13565e26 # v1.3.3
+ - uses: actions/attest@2da0b136720d14f01f4dbeeafd1d5a4d76cbe21d # v1.4.0
  id: attest
  with:
  subject-path: ${{ inputs.subject-path }}
@@ -64,4 +70,5 @@ runs:
  predicate-path:
  ${{ steps.generate-sbom-predicate.outputs.predicate-path }}
  push-to-registry: ${{ inputs.push-to-registry }}
+ show-summary: ${{ inputs.show-summary }}
  github-token: ${{ inputs.github-token }}