GitHub's actions/attest changed in version 2 to produce a single Sigstore attestation for all artefacts, instead of the previous behaviour (one attestation per artefact). I've tried upgrading to this, but I hit the error stating that each statement must have exactly one subject. Is it possible to work around this, or should this be fixed in actions/attest?

https://github.com/trailofbits/pypi-attestations/blob/v0.0.21/src/pypi_attestations/_impl.py#L274-L275

I've opened a similar issue on the action repo: actions/attest#213

A