From 70b38d0f34110c782e7bda07acf65af0cee95c6b Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Mon, 3 Jun 2024 10:51:59 -0700 Subject: [PATCH] testing 1.2.0 Signed-off-by: Brian DeHamer --- .github/workflows/big.yml | 2 +- .github/workflows/oci-google.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/big.yml b/.github/workflows/big.yml index e9fc82a..f2b65cc 100644 --- a/.github/workflows/big.yml +++ b/.github/workflows/big.yml @@ -26,7 +26,7 @@ jobs: cat output.dat | base64 > payload.dat jq --null-input --rawfile payload payload.dat '{"spdxVersion":"SPDX-2.3","SPDXID":"SPDXRef-DOCUMENT","payload":$payload}' > sbom.json - name: Attest SBOM - uses: actions/attest-sbom@v1 + uses: actions/attest-sbom@v1.2.0 with: subject-digest: 'sha256:7d070f6b64d9bcc530fe99cc21eaaa4b3c364e0b2d367d7735671fa202a03b32' subject-name: 'subject' diff --git a/.github/workflows/oci-google.yml b/.github/workflows/oci-google.yml index 25d397a..79d93a1 100644 --- a/.github/workflows/oci-google.yml +++ b/.github/workflows/oci-google.yml @@ -61,7 +61,7 @@ jobs: tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:0.0.1 - name: Attest artifact - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@main with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} subject-digest: ${{ steps.push.outputs.digest }}