REPOMATIC-PACK-ATTESTATION(1) REPOMATIC-PACK-ATTESTATION(1)

repomatic pack-attestation - Name an attestation bundle after the asset it attests

repomatic pack-attestation [OPTIONS]

Rename an attestation bundle after its subject, print the upload list.

actions/attest writes every bundle to the same `attestation.json` basename, so a release attaching several would keep only the last. This reads back the subjects the bundle actually attests, names it after them, and prints every file the release upload step should attach: the assets and their bundle, one path per line.

A bundle covering several assets has no single name to take, so pass --name to name the set instead.

Idempotent: re-running copies the same bytes over the same name.

Attestation bundle written by actions/attest.
[required]
Directory holding the attested assets, and where the bundle lands.
Stem naming the set, for a bundle attesting more than one asset.
Show this message and exit.

Attestation bundle written by actions/attest.
Directory holding the attested assets, and where the bundle lands.
Stem naming the set, for a bundle attesting more than one asset.
Show this message and exit.

0
Success.
1
A runtime error, or an aborted prompt (Ctrl-C, a declined confirmation).
2
A usage error: unknown option, invalid value, missing operand, or an unparsable configuration file.

Single asset, named papaya.tar.gz.attestation.json

repomatic pack\-attestation \-\-bundle "${BUNDLE_PATH}"

A glob's worth of assets, all covered by one bundle

repomatic pack\-attestation \-\-bundle b.json \-\-dir dist \-\-name papaya\-set

Kevin Deldycke

2026-09-14 7.15.1.dev0