Failed to create storage record: Error: Failed to persist storage record: no artifacts found\n```\n\n4 per build (2 images x 2 steps), never once succeeded, and they only feed the org Linked Artifacts page which we dont use. Attestations are unaffected. Not \"fixed\" with `artifact-metadata: write` -> the error is `no artifacts found`, not a 401/403/404, and the permission hint the action prints after it is unconditional in the catch block. Details in solution-arsenal#759.\n\nNo `NODE_OPTIONS` here. The wrappers set a `--max-http-header-size` bump, but that exists for Google Artifact Registry (GCS-signed upload URL in the redirect). We only push to ghcr, where the largest response measured was 509B total with a 95B longest single header against a 16384B limit. Left out on purpose, see solution-arsenal#759 for the measurements.\n\n## Testing\n\nLocally: `actionlint` clean on the changed file, 0 findings.\n\nThe upstream twin PRs are verified end to end, an `ok-to-image` run there was green on all 8 images with 0 warnings in the attest steps, and the attestations verify independently via `gh attestation verify` against Rekor for both `https://slsa.dev/provenance/v1` and `https://cyclonedx.org/bom`.\n\n**Not yet verified in this repo.** Needs an `ok-to-image` run before merge:\n\n- [x] `Attestation uploaded to repository` + `to registry` on both steps, 4/4\n- [x] no `attest-sbom has been deprecated` warning\n- [x] no `Failed to create storage record` warnings\n\n## Notes for reviewers\n\nWorkflows only, no CRD/API/RBAC. Dont squash blindly, commit 1 is behavior-neutral and commit 2 is not.\n\nRef opendefensecloud/odd-internal#75\n",

Failed to create storage record: Error: Failed to persist storage record: no artifacts found\n```\n\n4 per build (2 images x 2 steps), never once succeeded, and they only feed the org Linked Artifacts page which we dont use. Attestations are unaffected. Not \"fixed\" with `artifact-metadata: write` -> the error is `no artifacts found`, not a 401/403/404, and the permission hint the action prints after it is unconditional in the catch block. Details in solution-arsenal#759.\n\nNo `NODE_OPTIONS` here. The wrappers set a `--max-http-header-size` bump, but that exists for Google Artifact Registry (GCS-signed upload URL in the redirect). We only push to ghcr, where the largest response measured was 509B total with a 95B longest single header against a 16384B limit. Left out on purpose, see solution-arsenal#759 for the measurements.\n\n## Testing\n\nLocally: `actionlint` clean on the changed file, 0 findings.\n\nThe upstream twin PRs are verified end to end, an `ok-to-image` run there was green on all 8 images with 0 warnings in the attest steps, and the attestations verify independently via `gh attestation verify` against Rekor for both `https://slsa.dev/provenance/v1` and `https://cyclonedx.org/bom`.\n\n**Not yet verified in this repo.** Needs an `ok-to-image` run before merge:\n\n- [x] `Attestation uploaded to repository` + `to registry` on both steps, 4/4\n- [x] no `attest-sbom has been deprecated` warning\n- [x] no `Failed to create storage record` warnings\n\n## Notes for reviewers\n\nWorkflows only, no CRD/API/RBAC. Dont squash blindly, commit 1 is behavior-neutral and commit 2 is not.\n\nRef opendefensecloud/odd-internal#75\n",

Failed to create storage record: Error: Failed to persist storage record: no artifacts found\n```\n\n4 per build (2 images x 2 steps), never once succeeded, and they only feed the org Linked Artifacts page which we dont use. Attestations are unaffected. Not \"fixed\" with `artifact-metadata: write` -> the error is `no artifacts found`, not a 401/403/404, and the permission hint the action prints after it is unconditional in the catch block. Details in solution-arsenal#759.\n\nNo `NODE_OPTIONS` here. The wrappers set a `--max-http-header-size` bump, but that exists for Google Artifact Registry (GCS-signed upload URL in the redirect). We only push to ghcr, where the largest response measured was 509B total with a 95B longest single header against a 16384B limit. Left out on purpose, see solution-arsenal#759 for the measurements.\n\n## Testing\n\nLocally: `actionlint` clean on the changed file, 0 findings.\n\nThe upstream twin PRs are verified end to end, an `ok-to-image` run there was green on all 8 images with 0 warnings in the attest steps, and the attestations verify independently via `gh attestation verify` against Rekor for both `https://slsa.dev/provenance/v1` and `https://cyclonedx.org/bom`.\n\n**Not yet verified in this repo.** Needs an `ok-to-image` run before merge:\n\n- [x] `Attestation uploaded to repository` + `to registry` on both steps, 4/4\n- [x] no `attest-sbom has been deprecated` warning\n- [x] no `Failed to create storage record` warnings\n\n## Notes for reviewers\n\nWorkflows only, no CRD/API/RBAC. Dont squash blindly, commit 1 is behavior-neutral and commit 2 is not.\n\nRef opendefensecloud/odd-internal#75\n",