GIgitlab
attestations

List all attestations for a project

Lists all attestations for a specified project and artifact hash. This feature was introduced in GitLab 18.7.

get/api/v4/projects/{id}/attestations/{subject_digest}

Request

  • Base URL
    https://gitlab.com
  • Auth
    none declared

Path parameters

idstring required

The ID or URL-encoded path of the project

subject_digeststring required

The SHA-256 hash of the artifact

Response

List all attestations for a project

idinteger required
iidinteger required
created_atstring date-time required
updated_atstring date-time required
expire_atstring date-time required
project_idinteger required
build_idinteger required
statusstring required
predicate_kindstring required
predicate_typestring required
subject_digeststring required
download_urlstring required

Example response

{
  "id": 1,
  "iid": 14,
  "created_at": "2025-09-17T02:26:10.898Z",
  "updated_at": "2025-09-17T02:26:10.898Z",
  "expire_at": "2025-09-17T02:26:10.898Z",
  "status": "success",
  "predicate_kind": "provenance",
  "predicate_type": "https://slsa.dev/provenance/v1",
  "subject_digest": "5db1fee4b5703808c48078a76768b155b421b210c0761cd6a5d223f4d99f1eaa"
}

Changes

No recorded changes to this operation across all 5 revisions of this API.