AWS Elastic Beanstalk Deploy Action v1.0.4
This release includes artifact attestations for supply chain security.
Security Features
- ✅ SLSA Build Provenance attached to key artifacts
- ✅ Artifact integrity verified with SHA256 checksums
- ✅ Build environment attestation included
Verification Methods
Using GitHub CLI (Recommended):
gh attestation verify dist/index.js --repo aws-actions/aws-elasticbeanstalk-deploy
gh attestation verify action.yml --repo aws-actions/aws-elasticbeanstalk-deployUsing SHA256 checksums:
# Download the files and verify against the .sha256 files
sha256sum -c dist/index.js.sha256
sha256sum -c action.yml.sha256See the CHANGELOG for detailed changes in this release.
What's Changed
- chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #58
- Add custom user-agent to AWS API calls by @VarshaRagavendran in #59
- chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in #60
- chore(deps): bump brace-expansion by @dependabot[bot] in #61
Full Changelog: v1.0.3...v1.0.4