The GitHub Actions job "Java CI" on commons-release-plugin.git/feat/slsa has 
failed.
Run started by GitHub user ppkarwasz (triggered by ppkarwasz).

Head commit for run:
e2d4e1accad7b887f3b12302f69b8e20036f22e0 / Piotr P. Karwasz 
<[email protected]>
Add `build-attestation` target

This PR was moved from apache/commons-build-plugin#417

It adds a goal to generate a [SLSA](https://slsa.dev/) build attestation and 
attaches it to the build as a file with the `.intoto.json` extension.

The attestation records the following information about the build environment:

- The Java version used (vendor, version string)
- The Maven version used
- The `gitTree` hash of the unpacked Java distribution
- The `gitTree` hash of the unpacked Maven distribution

Report URL: 
https://github.com/apache/commons-release-plugin/actions/runs/23750972161

With regards,
GitHub Actions via GitBox

Reply via email to