Skip to content

Deletion, filtering, and bulk actions for managing artifact attestations [GA] #1128

Open
@glider-bot

Description

@glider-bot

Value Prop

We are adding new capabilities to manage artifact attestations more effectively:

  • Delete attestations: Easily delete artifact attestations through the UI or API to remove unwanted attestations, such as those linked to malicious or vulnerable artifacts.
  • Bulk operations: Use API endpoints to perform bulk actions on attestations, saving time when managing multiple attestations.
  • Advanced filtering: Quickly locate the attestations you need by filtering by predicate type, subject name or creation date.
  • Interactive list view: The attestations list view (<repository>/attestations) will become more interactive. You will be able to select one or multiple attestations to perform bulk actions, such as downloading or deleting. Additionally, you will be able to sort attestations by oldest or newest creation date.

Expected Outcome

Today, users can publish attestations, but once they're published, they have limited controls over them. They cannot delete existing attestations, even if they were created by accident. There is no built-in mechanism to expire attestations, which means they remain active indefinitely. To address this, we want to introduce lifecycle management capabilities that enable users to control the status and EOL of their attestations, including the ability to manage them in bulk.

Metadata

Metadata

Assignees

No one assigned

    Labels

    EnterpriseProduct SKU: GitHub EnterpriseFreeProduct SKU: GitHub FreeTeamProduct SKU: GitHub TeamgaFeature phase: Generally available

    Type

    No type

    Projects

    Status

    Q2 2025 – Apr-Jun

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions