Follow the steps below to tag a new release for the actions/attest
action.
-
Update the
version
field in package.json. -
Merge the latest changes to the
main
branch. -
Create a new release using a tag of the form
vX.X.X
following SemVer conventions:gh release create vX.X.X
-
Move (or create) the major version tag to point to the same commit tagged above:
git tag -fa vX -m "vX" git push origin vX --force
-
As appropriate, update any actions like
actions/attest-build-provenance
andactions/attest-sbom
which have a dependency onactions/attest