Skip to content

build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 in the actions group #517

build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 in the actions group

build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 in the actions group #517

Triggered via pull request July 3, 2026 19:36
Status Success
Total duration 39s
Artifacts 1

cross-version-verify.yaml

on: pull_request
Matrix: verify
Fit to window
Zoom out
Zoom in

Annotations

14 warnings
Verify with 3.5.6 on prod
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 3.5.6 on prod
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 3.6.7 on staging
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 3.6.7 on staging
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 4.1.0 on prod
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 4.1.0 on prod
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 3.6.7 on prod
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 3.6.7 on prod
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 4.0.0 on prod
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 4.0.0 on prod
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 4.2.0 on staging
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 4.2.0 on staging
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.
Verify with 4.2.0 on prod
No file matched to [/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*requirements*.in,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.txt,/home/runner/work/sigstore-python/sigstore-python/**/*constraints*.in,/home/runner/work/sigstore-python/sigstore-python/**/pyproject.toml,/home/runner/work/sigstore-python/sigstore-python/**/uv.lock,/home/runner/work/sigstore-python/sigstore-python/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.
Verify with 4.2.0 on prod
Empty workdir detected. This may cause unexpected behavior. You can enable ignore-empty-workdir to mute this warning.

Artifacts

Produced during runtime
Name Size Digest
bundle Expired
14.1 KB
sha256:ec518be8f388c1d2ea7f0616a9241a1a676bf915f153e08c228a2b6f260ebb9b