From c870a8935c5c1830d2db002d8da655b6b145d454 Mon Sep 17 00:00:00 2001 From: Caleb Brown Date: Tue, 28 Feb 2023 13:36:00 +1100 Subject: [PATCH] Fix broken provenance generation - workflow must use tag. (#339) Signed-off-by: Caleb Brown --- .github/workflows/binary-release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/binary-release.yml b/.github/workflows/binary-release.yml index 16fbf76f3..df07c2c8e 100644 --- a/.github/workflows/binary-release.yml +++ b/.github/workflows/binary-release.yml @@ -1,4 +1,4 @@ -name: binary-release +name: Binary Release on: push: @@ -52,7 +52,7 @@ jobs: actions: read # To read the workflow path. id-token: write # To sign the provenance. contents: write # To add assets to a release. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@68bad40844440577b33778c9f29077a3388838e9 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 with: base64-subjects: "${{ needs.goreleaser.outputs.hashes }}" upload-assets: true # upload to a new release