---
title: "List all attestations for a project"
method: GET
path: "/api/v4/projects/{id}/attestations/{subject_digest}"
tags: ["attestations"]
---

# List all attestations for a project

`GET /api/v4/projects/{id}/attestations/{subject_digest}`

## Request

- Base URL: `https://gitlab.com`
- URL: `https://gitlab.com/api/v4/projects/{id}/attestations/{subject_digest}`
- Auth: none declared

Lists all attestations for a specified project and artifact hash. This feature was introduced in GitLab 18.7.

## Path parameters

- `id` string, required
- `subject_digest` string, required

## Response `200`

List all attestations for a project

- APIEntitiesSupplyChainAttestation: API_Entities_SupplyChain_Attestation model
  - `id` integer, required
  - `iid` integer, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required
  - `expire_at` string, date-time, required
  - `project_id` integer, required
  - `build_id` integer, required
  - `status` string, required
  - `predicate_kind` string, required
  - `predicate_type` string, required
  - `subject_digest` string, required
  - `download_url` string, required

## Other responses

- `404`: Artifact SHA-256 not found

---

[API](https://skmtc.dev/gitlab/apis/gitlab-api.md) - [All operations](https://skmtc.dev/gitlab/apis/gitlab-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitlab/apis/gitlab-api/revisions/b234947ef3f2?raw)