docs: attachments and SBOMs up to 100 MB

[ToreMerkely]

Document the 100 MB attachment limit that CLI v2.48.0 brings, where an attachment is sent, and how an organization's limit is raised. Removes the old 10 MB and 9 MiB SBOM limits from the attestations page.

Part of kosli-dev/server#7268

🤖 Generated with Claude Code

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
kosli	🟢 Ready	View Preview	Oct 16, 2026, 6:14 AM

[claude]

Claude finished @ToreMerkely's task in 36s —— View job

---

Doc review

getting_started/attestations.md

Improvement — Location: getting_started/attestations.md:174
Issue: The flag table above the new paragraph still says --attachments uploads "files or directories to the Evidence Vault as compressed archives". The new prose at lines 193–194 says the opposite: "A single file is uploaded as it is". A reader who scans the table gets the old behavior. This row isn't part of the diff, so the PR leaves it out of sync.
Recommendation: Change the row to something like "Upload files or directories to the Evidence Vault (up to 100 MB by default) for later download".
Fix this →

Upstream — does not block this merge

• kosli-dev/cli, the shared --attachments flag description (used by the attest commands, e.g. cmd/kosli/attestCustom.go, attestDecision.go, attestSonar.go, attestPullRequest*.go). The v2.48.0 reference pages still say "All attachments are compressed and uploaded to Kosli's evidence vault" (for example client_reference/kosli_attest_custom.md:45). That disagrees with this PR's statement that a single file is uploaded as it is. It also gives no size limit. If the PR's description of v2.48.0 behavior is correct, update the flag help text upstream, and consider mentioning the 100 MB default there. If the help text is correct, the prose at attestations.md:193 is wrong.

Totals: 0 Critical, 1 Improvement, 1 upstream. Fine to merge once the table row is fixed (or now, if you fix the row in a follow-up). This review is advisory.

[mbevc1]

Note: this is automatically generated every Monday