From 2da9c65f1c4f76b91ad7a9441d63c71559c5f274 Mon Sep 17 00:00:00 2001 From: laurentsimon Date: Tue, 25 Jul 2023 21:01:14 +0000 Subject: [PATCH] update Signed-off-by: laurentsimon --- .github/workflows/builder_example_slsa3.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/builder_example_slsa3.yml b/.github/workflows/builder_example_slsa3.yml index 2b64b54..09d1485 100644 --- a/.github/workflows/builder_example_slsa3.yml +++ b/.github/workflows/builder_example_slsa3.yml @@ -89,7 +89,7 @@ jobs: steps: - name: Generate the token id: generate - uses: slsa-framework/slsa-github-generator/actions/delegator/setup-generic@v1.7.0 + uses: slsa-framework/slsa-github-generator/actions/delegator/setup-generic@main with: slsa-workflow-recipient: "delegator_generic_slsa3.yml" slsa-rekor-log-public: ${{ inputs.rekor-log-public }} @@ -106,7 +106,7 @@ jobs: contents: write # For asset uploads. packages: write # For package uploads. actions: read # For the entrypoint. - uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@v1.7.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_generic_slsa3.yml@main with: slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }} secrets: @@ -121,7 +121,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download provenance - uses: slsa-framework/slsa-github-generator/actions/delegator/secure-attestations-download@v1.7.0 + uses: slsa-framework/slsa-github-generator/actions/delegator/secure-attestations-download@main with: name: ${{ needs.slsa-run.outputs.attestations-download-name }} sha256: ${{ needs.slsa-run.outputs.attestations-download-sha256 }}