Refactor

.github/workflows/build.yml

@@ -1,6 +1,5 @@
 name: Build with provenance
 on:
-  - workflow_dispatch
   - push
 
 permissions: read-all
@@ -22,8 +21,4 @@ jobs:
           distribution: 'liberica'
           architecture: x64
       - name: Maven build
-        run: ./mvnw --batch-mode --update-snapshots verify
-      - name: Add provenence
-        uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
-        with:
-          rekor-log-public: true
+        run: ./mvnw --batch-mode --update-snapshots verify

.github/workflows/provenance.yml

@@ -0,0 +1,13 @@
+name: Generate provenance
+on:
+  - workflow_dispatch
+
+permissions: read-all
+
+jobs:
+  build:
+    permissions:
+      id-token: write
+      contents: read
+      actions: read
+    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]