Skip to content

Commit bfd5515

Browse files
committed
Update github-actions to 3c52f7b
1 parent 3c52f7b commit bfd5515

File tree

6 files changed

+19
-19
lines changed

6 files changed

+19
-19
lines changed

.github/actions/generate-builder/action.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ runs:
3434
using: "composite"
3535
steps:
3636
- name: Checkout the Go builder repository
37-
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
37+
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@3c52f7b84f05b35edc1869347f5b160ba88238f0
3838
with:
3939
repository: "${{ inputs.repository }}"
4040
ref: "${{ inputs.ref }}"
@@ -62,7 +62,7 @@ runs:
6262
run: ./.github/actions/generate-builder/generate-builder.sh
6363

6464
- name: Compute sha256 of builder
65-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
65+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@3c52f7b84f05b35edc1869347f5b160ba88238f0
6666
id: compute
6767
with:
6868
path: "${{ inputs.binary }}"

.github/actions/secure-download-artifact/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ runs:
3636

3737
- name: Compute the hash
3838
id: compute
39-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
39+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@3c52f7b84f05b35edc1869347f5b160ba88238f0
4040
with:
4141
path: "${{ inputs.path }}"
4242

.github/actions/secure-upload-artifact/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ runs:
1818
steps:
1919
- name: Compute binary hash
2020
id: compute-digest
21-
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
21+
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@3c52f7b84f05b35edc1869347f5b160ba88238f0
2222
with:
2323
path: "${{ inputs.path }}"
2424

.github/workflows/builder_go_slsa3.yml

+10-10
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
steps:
6969
- name: Generate random 16-byte value (32-char hex encoded)
7070
id: rng
71-
uses: slsa-framework/slsa-github-generator/.github/actions/rng@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
71+
uses: slsa-framework/slsa-github-generator/.github/actions/rng@3c52f7b84f05b35edc1869347f5b160ba88238f0
7272

7373
detect-env:
7474
outputs:
@@ -95,7 +95,7 @@ jobs:
9595
steps:
9696
- name: Generate builder
9797
id: generate
98-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
98+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@3c52f7b84f05b35edc1869347f5b160ba88238f0
9999
with:
100100
repository: "${{ needs.detect-env.outputs.repository }}"
101101
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -128,12 +128,12 @@ jobs:
128128
needs: [builder, rng]
129129
steps:
130130
- name: Checkout the Go repository
131-
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
131+
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@3c52f7b84f05b35edc1869347f5b160ba88238f0
132132
with:
133133
go-version: ${{ inputs.go-version }}
134134

135135
- name: Download builder
136-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
136+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
137137
with:
138138
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
139139
path: "${{ env.BUILDER_BINARY }}"
@@ -166,12 +166,12 @@ jobs:
166166
needs: [builder, build-dry, rng]
167167
steps:
168168
- name: Checkout the Go repository
169-
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
169+
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@3c52f7b84f05b35edc1869347f5b160ba88238f0
170170
with:
171171
go-version: ${{ inputs.go-version }}
172172

173173
- name: Download builder
174-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
174+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
175175
with:
176176
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
177177
path: "${{ env.BUILDER_BINARY }}"
@@ -217,7 +217,7 @@ jobs:
217217
218218
- name: Upload generated binary
219219
id: upload
220-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
220+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
221221
with:
222222
name: "${{ needs.build-dry.outputs.go-binary-name }}"
223223
path: "${{ needs.build-dry.outputs.go-binary-name }}"
@@ -238,7 +238,7 @@ jobs:
238238
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
239239
steps:
240240
- name: Download builder
241-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
241+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
242242
with:
243243
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
244244
path: "${{ env.BUILDER_BINARY }}"
@@ -290,14 +290,14 @@ jobs:
290290
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
291291
steps:
292292
- name: Download binary
293-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
293+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
294294
with:
295295
name: "${{ needs.build-dry.outputs.go-binary-name }}"
296296
path: "${{ needs.build-dry.outputs.go-binary-name }}"
297297
sha256: "${{ needs.build.outputs.go-binary-sha256 }}"
298298

299299
- name: Download provenance
300-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
300+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
301301
with:
302302
name: "${{ needs.provenance.outputs.go-provenance-name }}"
303303
path: "${{ needs.provenance.outputs.go-provenance-name }}"

.github/workflows/generator_container_slsa3.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ jobs:
5757
steps:
5858
- name: Detect the generator ref
5959
id: detect
60-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
60+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@3c52f7b84f05b35edc1869347f5b160ba88238f0
6161

6262
# generator builds the generator binary and runs it to generate SLSA
6363
# provenance.
@@ -81,7 +81,7 @@ jobs:
8181
packages: write
8282
steps:
8383
- name: Generate builder
84-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
84+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@3c52f7b84f05b35edc1869347f5b160ba88238f0
8585
with:
8686
repository: "${{ needs.detect-env.outputs.repository }}"
8787
ref: "${{ needs.detect-env.outputs.ref }}"

.github/workflows/generator_generic_slsa3.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ jobs:
6969
steps:
7070
- name: Detect the generator ref
7171
id: detect
72-
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
72+
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@3c52f7b84f05b35edc1869347f5b160ba88238f0
7373

7474
# generator builds the generator binary and runs it to generate SLSA
7575
# provenance.
@@ -93,7 +93,7 @@ jobs:
9393
actions: read
9494
steps:
9595
- name: Generate builder
96-
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
96+
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@3c52f7b84f05b35edc1869347f5b160ba88238f0
9797
with:
9898
repository: "${{ needs.detect-env.outputs.repository }}"
9999
ref: "${{ needs.detect-env.outputs.ref }}"
@@ -148,7 +148,7 @@ jobs:
148148
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
149149
steps:
150150
- name: Download the provenance
151-
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@bd5d98277f41bbe5ef9f7a4fd7e0031c9b8aef68
151+
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@3c52f7b84f05b35edc1869347f5b160ba88238f0
152152
with:
153153
name: "${{ inputs.attestation-name }}"
154154
path: "${{ inputs.attestation-name }}"

0 commit comments

Comments
 (0)