Skip to content

Commit bfa6b53

Browse files
chore(deps): bump actions/attest-build-provenance (#113)
Bumps the github-action group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `actions/attest-build-provenance` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@v2.3.0...v2.4.0) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent fedad89 commit bfa6b53

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/publish-image.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353

5454
# This step generates an artifact attestation for the image, which is an unforgeable statement about where and how it was built. It increases supply chain security for people who consume the image. For more information, see "[AUTOTITLE](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds)."
5555
- name: Generate artifact attestation
56-
uses: actions/attest-build-provenance@v2.3.0
56+
uses: actions/attest-build-provenance@v2.4.0
5757
with:
5858
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
5959
subject-digest: ${{ steps.push.outputs.digest }}

0 commit comments

Comments
 (0)