What do artifact attestations help software consumers verify?

AThe build provenance and integrity information for an artifact

BThat a repository has no open issues

CThat every workflow uses a larger runner

DThat all dependencies are licensed permissively

More Secure and optimize automation Questions

28 questions

Full GitHub Actions Practice Test

All topics covered

All GitHub Actions Questions

Browse by topic

Related Questions

Why do GitHub Actions workflows use OpenID Connect with cloud providers?...

easy

A workflow author wants to run a step only when a secret exists. What should they do?...

medium

A workflow runs for a pull request from a forked repository. Which credential behavior should the ma...

medium

A caller workflow wants a reusable workflow to use one of the caller's secrets. What must the caller...

medium

What is the most secure way to reference a third-party action in a workflow?...

medium

View all Secure and optimize automation questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.