Still trying to fix provenance

Author: Val Brodsky

.github/workflows/lbox-publish.yml

@@ -94,12 +94,15 @@ jobs:
           HASH_VAR="hashes-${{ matrix.package }}"
           echo "HASH_VAR=$HASH_VAR" >> $GITHUB_ENV
           echo "Using hash: ${{ env.HASH_VAR }}"
-      - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
+      - uses: slsa-framework/[email protected]
         with:
+          repository: slsa-framework/slsa-github-generator
+          path: actions/generator/generic/create-base64-subjects-from-file
+          ref: v2.0.0
           base64-subjects: "${{ env.HASH_VAR }}"
           upload-assets: true
           upload-tag-name: v.6.0.0 # Tag from the initiation of the workflow  
-          
+        
   test-build:
     needs: ['path-filter']
     if: ${{ needs.path-filter.outputs.lbox == 'true' }}