|
71 | 71 | id-token: write # Needed for provenance signing and ID |
72 | 72 | contents: write # Needed for release uploads |
73 | 73 | # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
74 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 74 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
75 | 75 | with: |
76 | 76 | base64-subjects: "${{ needs.generate-subject-for-cli-provenance.outputs.hashes }}" |
77 | 77 | provenance-name: "karmada-cli.intoto.jsonl" |
@@ -113,7 +113,7 @@ jobs: |
113 | 113 | id-token: write # Needed for provenance signing and ID |
114 | 114 | contents: write # Needed for release uploads |
115 | 115 | # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
116 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 116 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
117 | 117 | with: |
118 | 118 | base64-subjects: "${{ needs.release-crds-assests.outputs.hashes }}" |
119 | 119 | provenance-name: "karmada-crds.intoto.jsonl" |
@@ -152,7 +152,7 @@ jobs: |
152 | 152 | id-token: write # Needed for provenance signing and ID |
153 | 153 | contents: write # Needed for release uploads |
154 | 154 | # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
155 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 155 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
156 | 156 | with: |
157 | 157 | base64-subjects: "${{ needs.release-charts.outputs.hashes }}" |
158 | 158 | provenance-name: "karmada-charts.intoto.jsonl" |
@@ -195,7 +195,7 @@ jobs: |
195 | 195 | id-token: write # Needed for provenance signing and ID |
196 | 196 | contents: write # Needed for release uploads |
197 | 197 | # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
198 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 198 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
199 | 199 | with: |
200 | 200 | base64-subjects: "${{ needs.sbom-assests.outputs.hashes }}" |
201 | 201 | provenance-name: "karmada-sbom.intoto.jsonl" |
|
0 commit comments