fix(ci) slsa generator with tag instead of sha

Signed-off-by: Rafael Passos <rafael@rcpassos.me>

Author: auyer

.github/workflows/publish.yaml

@@ -124,6 +124,7 @@ jobs:
       - name: Generate hashes
         id: hash
         run: |
+          cd target/release/
           echo "hashes=$(sha256sum $(echo *.zip *.deb *.rpm *.gz ) | base64 -w0)" >> "$GITHUB_OUTPUT"
 
   provenance:
@@ -132,7 +133,7 @@ jobs:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
     with:
       base64-subjects: "${{ needs.release.outputs.hashes }}"
       upload-assets: true