chore: use draft-release for slsa provenance

Signed-off-by: Matthew Penner <[email protected]>
caddyserver · May 20, 2024 · 60b6e5b · 60b6e5b
1 parent 6bae840
commit 60b6e5b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -80,6 +80,8 @@ jobs:
     uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
     with:
       base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
+      provenance-name: "provenance.intoto.jsonl"
       upload-assets: true
       # Use the existing release created by Goreleaser instead of creating another.
       upload-tag-name: "${{ needs.goreleaser.outputs.tag_name }}"
+      draft-release: true