From 7ab83002c89d93f476c9a09d7ac57b5b5f4a905a Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 9 Dec 2024 10:45:52 -0800 Subject: [PATCH] add note about gh plans supporting attestations (#136) Signed-off-by: Brian DeHamer --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index 1552b94..f2a95bc 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,16 @@ CLI][7]. See [Using artifact attestations to establish provenance for builds][11] for more information on artifact attestations. + +> [!NOTE] +> Artifact attestations are available in public repositories for all +> current GitHub plans. They are not available on legacy plans, such as Bronze, +> Silver, or Gold. If you are on a GitHub Free, GitHub Pro, or GitHub Team plan, +> artifact attestations are only available for public repositories. To use +> artifact attestations in private or internal repositories, you must be on a +> GitHub Enterprise Cloud plan. + + ## Usage Within the GitHub Actions workflow which builds some artifact you would like to