Skip to content

Commit 11df497

Browse files
fix: revert softprops/action-gh-release to v2.1.0 (#4036)
# Summary fixes #4031 (comment). revert softprops/action-gh-release to v2.1.0 Folks suggest that 2.1.0 is the last known good version. softprops/action-gh-release#556 ## Testing Process N/A ## Checklist - [x] Review the contributing [guidelines](https://github.com/slsa-framework/slsa-github-generator/blob/main/CONTRIBUTING.md) - [x] Add a reference to related issues in the PR description. - [x] Update documentation if applicable. - [ ] Add unit tests if applicable. - [ ] Add changes to the [CHANGELOG](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) if applicable.
1 parent 7314a69 commit 11df497

File tree

5 files changed

+6
-6
lines changed

5 files changed

+6
-6
lines changed

.github/workflows/builder_container-based_slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -598,7 +598,7 @@ jobs:
598598
path: "${{ needs.provenance.outputs.provenance-name }}"
599599

600600
- name: Upload provenance new tag
601-
uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
601+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
602602
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-tag-name == ''
603603
id: release-new-tags
604604
with:
@@ -609,7 +609,7 @@ jobs:
609609
draft: ${{ inputs.draft-release }}
610610

611611
- name: Upload provenance tag name
612-
uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
612+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
613613
if: inputs.upload-tag-name != ''
614614
with:
615615
prerelease: ${{ inputs.prerelease }}

.github/workflows/builder_go_slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -399,7 +399,7 @@ jobs:
399399
sha256: "${{ needs.provenance.outputs.go-provenance-sha256 }}"
400400

401401
- name: Upload provenance
402-
uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
402+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
403403
with:
404404
tag_name: ${{ inputs.upload-tag-name }}
405405
prerelease: ${{ inputs.prerelease }}

.github/workflows/generator_generic_slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -285,7 +285,7 @@ jobs:
285285
sha256: "${{ needs.generator.outputs.provenance-sha256 }}"
286286

287287
- name: Upload provenance
288-
uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
288+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
289289
id: release
290290
with:
291291
draft: ${{ inputs.draft-release }}

SPECIFICATIONS.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -200,7 +200,7 @@ jobs:
200200
with:
201201
name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl
202202
- name: Release
203-
uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
203+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
204204
if: startsWith(github.ref, 'refs/tags/')
205205
with:
206206
files: |

internal/builders/generic/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -203,7 +203,7 @@ jobs:
203203
name: artifact2
204204
205205
- name: Upload assets
206-
uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5
206+
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # v2.1.0
207207
with:
208208
files: |
209209
artifact1

0 commit comments

Comments
 (0)