testing 1.2.0

Signed-off-by: Brian DeHamer <bdehamer@github.com>
bdehamer · Jun 3, 2024 · 70b38d0 · 70b38d0
1 parent bee23d5
commit 70b38d0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/big.yml b/.github/workflows/big.yml
@@ -26,7 +26,7 @@ jobs:
           cat output.dat | base64 > payload.dat
           jq --null-input --rawfile payload payload.dat '{"spdxVersion":"SPDX-2.3","SPDXID":"SPDXRef-DOCUMENT","payload":$payload}' > sbom.json
       - name: Attest SBOM
-        uses: actions/attest-sbom@v1
+        uses: actions/attest-sbom@v1.2.0
         with:
           subject-digest: 'sha256:7d070f6b64d9bcc530fe99cc21eaaa4b3c364e0b2d367d7735671fa202a03b32'
           subject-name: 'subject'

diff --git a/.github/workflows/oci-google.yml b/.github/workflows/oci-google.yml
@@ -61,7 +61,7 @@ jobs:
           tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:0.0.1
 
       - name: Attest artifact
-        uses: actions/attest-build-provenance@v1
+        uses: actions/attest-build-provenance@main
         with:
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           subject-digest: ${{ steps.push.outputs.digest }}