We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a437af0 commit ded722fCopy full SHA for ded722f
.github/workflows/release.yml
@@ -142,7 +142,7 @@ jobs:
142
actions: read # for detecting the Github Actions environment.
143
id-token: write # for creating OIDC tokens for signing.
144
contents: write # for uploading attestations to GitHub releases.
145
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.9.0
+ uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
146
with:
147
provenance-name: "provenance.intoto.jsonl"
148
base64-subjects: "${{ needs.release-flagger.outputs.hashes }}"
0 commit comments