We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent dfe3807 commit d1b69a3Copy full SHA for d1b69a3
.github/workflows/tag-and-build-release.yaml
@@ -82,7 +82,7 @@ jobs:
82
id-token: write # To sign the provenance.
83
contents: write # To add assets to a release.
84
# use tags here: https://github.com/slsa-framework/slsa-github-generator#referencing-slsa-builders-and-generators
85
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.7.0
+ uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.9.0
86
with:
87
attestation-name: "sigstore-java-${{ github.event.inputs.release_version }}.attestation.intoto.jsonl"
88
base64-subjects: "${{ needs.build.outputs.hashes }}"
0 commit comments