Still trying to fix provenance

Author: Val Brodsky

.github/workflows/lbox-publish.yml

@@ -96,10 +96,11 @@ jobs:
           echo "Using hash: ${{ env.HASH_VAR }}"
       - uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
         with:
+          private-repository: true
           base64-subjects: "${{ env.HASH_VAR }}"
           upload-assets: true
           upload-tag-name: v.6.0.0 # Tag from the initiation of the workflow  
-          
+        
   test-build:
     needs: ['path-filter']
     if: ${{ needs.path-filter.outputs.lbox == 'true' }}