# GitHub Artifact Attestation Evidence

This internal Buildchain action validates one downloaded Linux release artifact
against its platform manifest and Release Passport, writes the custom predicate
consumed by `actions/attest`, and finalizes the retained v1 evidence document.

Consumers should call
`.github/workflows/github-artifact-attestation.yml`; they should not call this
action directly. The action parses data files only. It never checks out or
executes consumer source or the downloaded subject.