[Schema Inaccuracy] `/orgs/{org}/attestations/bulk-list` shouldn't use POST

[wolfy1339]

Schema Inaccuracy

The /orgs/{org}/attestations/bulk-list endpoint is defined in the schema as accepting only POST, while all other list endpoints use GET

Expected

The endpoint should be defined as using GET

Reproduction Steps

N/A

octokit/openapi#504

[shawnHartsell]

@wolfy1339 Thanks for submitting an issue! I've routed this internal to the team that owns the endpoint so it can be addressed.

[malancas]

This endpoint uses the POST method instead of the GET method because it needs to support users submitting a request body containing two fields, one of which is an array of strings. See below:

{"subject_digests":["sha256:abc123","sha512:def456", ....], "predicate_type": "provenance"}'

We use a request body to support a dynamic number of elements in the subject_digest array.

[Uzlopak]

Oh. You need to filter by hash values? Isnt it then not more like a search endpoint than a list endpoint?