It seems that the dep-track attachment validation fails if you provide a project id and you have more than 100 projects.
This is due to the validation check not taking into account paginated results. We should also double check why we need to list projects instead of accessing a specific one.