gh-attest

Warning

This repository is deprecated. The maintained reusable AI attestation workflow is now part of OMT-Global/bootstrap. This repository is retained as an archived historical record.

The functionality was consolidated into Bootstrap so repository scaffolding, workflow generation, and attestation maintenance share one control plane. New consumers should call Bootstrap's ai-attestation-reusable.yml.

Migration

Replace calls to this repository with the Bootstrap workflow:

name: ai-attestation

on:
  pull_request:
  push:
    branches: [ main ]

jobs:
  attest:
    uses: OMT-Global/bootstrap/.github/workflows/ai-attestation-reusable.yml@v1.0.0
    with:
      artifact_name: ai-attestation
      retention_days: 90
      ai_provider: OpenAI
      ai_model: gpt-5.1-code
      prompt_hash: unknown

Production consumers that require immutable workflow references should replace the version tag with an approved full Bootstrap commit SHA.

The lightweight Bootstrap workflow is distinct from the broader provenance policy and manifest contract maintained by OMT-Global/flow.