From 9ad33ffaddb53bc4c03a302c75a8f61a8a407e35 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 9 Dec 2024 10:46:36 -0800 Subject: [PATCH] add note about gh plans supporting attestations (#414) Signed-off-by: Brian DeHamer --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index 5375e07a..66d99310 100644 --- a/README.md +++ b/README.md @@ -25,6 +25,16 @@ CLI][5]. See [Using artifact attestations to establish provenance for builds][9] for more information on artifact attestations. + +> [!NOTE] +> Artifact attestations are available in public repositories for all +> current GitHub plans. They are not available on legacy plans, such as Bronze, +> Silver, or Gold. If you are on a GitHub Free, GitHub Pro, or GitHub Team plan, +> artifact attestations are only available for public repositories. To use +> artifact attestations in private or internal repositories, you must be on a +> GitHub Enterprise Cloud plan. + + ## Usage Within the GitHub Actions workflow which builds some artifact you would like to