fix attempt to use dynamic secure-uplaod-artifact

Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>

.github/actions/secure-upload-folder/action.yml

@@ -24,6 +24,14 @@ inputs:
   path:
     description: 'Path to the folder'
     required: true
+  repo:
+    description: 'repo of secure-upload-artifact to use'
+    required: false
+    default: 'slsa-framework/slsa-github-generator'
+  ref:
+    description: 'ref of secure-upload-artifact to use'
+    required: false
+    default: 'main'
 outputs:
   sha256:
     description: "SHA256 of the uploaded tarball."
@@ -60,7 +68,7 @@ runs:
 
     - name: Upload the artifact
       id: upload
-      uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@main
+      uses: "${{ inputs.repo }}.github/actions/secure-upload-artifact@${{ inputs.ref }}"
       with:
         name: "${{ inputs.name }}"
         path: "${{ steps.create.outputs.tarball-path }}"

.github/workflows/pre-submit.actions.yml

@@ -260,13 +260,16 @@ jobs:
         with:
           name: "${{ env.ARTIFACT_NAME }}"
           path: "${{ env.UPLOAD_FOLDER_NAME }}"
+          repo: 
 
       - name: Upload
         id: upload-noroot
         uses: ./.github/actions/secure-upload-folder
         with:
           name: "${{ env.ARTIFACT_NO_ROOT_NAME }}"
           path: "${{ env.UPLOAD_FOLDER_NO_ROOT_NAME }}"
+          repo: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
+          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
 
       - name: Download in new folder
         uses: ./.github/actions/secure-download-folder