From 9e82563a3aea1bcddfcc803eb76fe527a13cb23c Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Thu, 5 Dec 2024 14:16:30 -0500 Subject: [PATCH] document the version that causes problems here Signed-off-by: William Woodruff --- Library/Homebrew/attestation.rb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Library/Homebrew/attestation.rb b/Library/Homebrew/attestation.rb index 20c3b4aea6..00efbcad29 100644 --- a/Library/Homebrew/attestation.rb +++ b/Library/Homebrew/attestation.rb @@ -168,6 +168,8 @@ module Homebrew # As of 2024-12-04 GitHub's Artifact Attestation feature can put multiple subjects # in a single attestation, so we check every subject in each attestation # and select the first attestation with a matching subject. + # In particular, this happens with v2.0.0 and later of the + # `actions/attest-build-provenance` action. subject = bottle.filename.to_s if subject.blank? attestation = if bottle.tag.to_sym == :all