From 527ff9e733c2a69e408535dbf76d43312b839227 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 11:27:53 +0000 Subject: [PATCH] :dependabot: github-actions(deps): Bump actions/attest-build-provenance from 1.4.1 to 1.4.2 (#133) --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 077d745..1d32467 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -57,7 +57,7 @@ jobs: output-file: "sbom.cyclonedx.json" - name: Attest - uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 id: attest with: subject-name: ghcr.io/${{ github.repository }}