search

r-lib / actions

GitHub Actions for the R community
Creative Commons Zero v1.0 Universal
963 stars 210 forks source link

OpenSSF: signed releases #837

Closed gaborcsardi closed 4 months ago

gaborcsardi commented 4 months ago

Reason

Project has not signed or included provenance with any releases.

Details

Warn: release artifact sysreqs0 not signed: https://api.github.com/repos/r-lib/actions/releases/148421721
Warn: release artifact sysreqs0 does not have provenance: https://api.github.com/repos/r-lib/actions/releases/148421721

We need to move those files to another repo, unfortunately, as we can't generate an SLSA provenance file for them.

gaborcsardi commented 4 months ago

I moved the files, and will delete the old files after the new release, so hopefully this is going to be fixed them.

gaborcsardi commented 4 months ago

Now we have no releases, so this is solved.

github-actions[bot] commented 4 months ago

This issue has been automatically locked. If you believe you have found a related problem, please file a new issue and include a link to this issue