You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@commons.apache.org by GitBox <gi...@apache.org> on 2026/03/30 14:48:43 UTC

[GH] (commons-release-plugin/feat/slsa): Workflow run "Java CI" failed!

The GitHub Actions job "Java CI" on commons-release-plugin.git/feat/slsa has failed.
Run started by GitHub user ppkarwasz (triggered by ppkarwasz).

Head commit for run:
e2d4e1accad7b887f3b12302f69b8e20036f22e0 / Piotr P. Karwasz <pk...@apache.org>
Add `build-attestation` target

This PR was moved from apache/commons-build-plugin#417

It adds a goal to generate a [SLSA](https://slsa.dev/) build attestation and attaches it to the build as a file with the `.intoto.json` extension.

The attestation records the following information about the build environment:

- The Java version used (vendor, version string)
- The Maven version used
- The `gitTree` hash of the unpacked Java distribution
- The `gitTree` hash of the unpacked Maven distribution

Report URL: https://github.com/apache/commons-release-plugin/actions/runs/23750972161

With regards,
GitHub Actions via GitBox