Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update gcr.io/distroless/static Docker digest to d9f9472
• Update dependency gradle to v8.14.1
• Update dependency io_bazel_rules_go to v0.54.1
• Update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0
• Update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0
• Update dependency typescript to v5.8.3
• Update github-actions (actions/checkout, actions/download-artifact, actions/setup-go, actions/setup-node, actions/upload-artifact, docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action, go, golangci/golangci-lint-action, google-github-actions/auth, google-github-actions/setup-gcloud, goreleaser/goreleaser-action, sigstore/cosign-installer, slsa-framework/example-trw)
• Update golang Docker tag to v1.24
• Update npm (@actions/artifact, @actions/core, @actions/github)
• Update dependency @octokit/action to v8
• Update dependency bazel to v8
• Update github-actions (major) (docker/build-push-action, golangci/golangci-lint-action, goreleaser/goreleaser-action, slsa-framework/example-trw)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package ramonpetgrave64/slsa-github-generator, Failed to look up maven package io.github.slsa-framework.slsa-github-generator:hash-maven-plugin.

Files affected: .github/workflows/e2e.container-based.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml, .github/workflows/e2e.container.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml, .github/workflows/e2e.generic.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml, .github/workflows/e2e.go.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml, e2e/maven/workflow_dispatch/pom.xml

---

Detected dependencies

Note

Detected dependencies section has been truncated

bazel

WORKSPACE

• io_bazel_rules_go v0.54.0

bazelisk

.bazelversion

• bazel 7.6.1

cloudbuild

cloudbuild.yaml

dockerfile

Dockerfile

• golang 1.21@sha256:4746d26432a9117a5f58e95cb9f954ddf0de128e9d5816886514199316e4a2fb
• gcr.io/distroless/static sha256:3d0f463de06b7ddff27684ec3bfd0b54a425149d0f8685308b1fdf297b0265e9

github-actions

.github/workflows/e2e.container-based.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.push.main.multi.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml

• google-github-actions/auth v2.1.0@5a50e581162a13f4baa8916d01180d2acbc04363
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• google-github-actions/auth v2.1.0@5a50e581162a13f4baa8916d01180d2acbc04363
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml

• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.schedule.main.registry-username.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.tag.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container-based.workflow_dispatch.main.adversarial-builder-binary.slsa3.yml

• slsa-framework/slsa-github-generator v2.1.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.container-based.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml

• ramonpetgrave64/slsa-github-generator v2.1.0-rc.3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.push.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.schedule.main.continue-on-error.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.schedule.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.schedule.main.provenance-repository.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.tag.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.tag.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.tag.main.gcp-workload-identity.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• google-github-actions/auth v2.1.0@5a50e581162a13f4baa8916d01180d2acbc04363
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• google-github-actions/auth v2.1.0@5a50e581162a13f4baa8916d01180d2acbc04363
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.tag.main.registry-username-secret.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.workflow_dispatch.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.workflow_dispatch.main.adversarial-builder-binary.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• slsa-framework/slsa-github-generator v2.1.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.container.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• ramonpetgrave64/slsa-github-generator v2.1.0-rc.3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.container.workflow_dispatch.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.container.workflow_dispatch.main.workflow_inputs.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/metadata-action v5.5.1@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
• docker/build-push-action v5.1.0@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• sigstore/cosign-installer v3.4.0@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-lowperms.create.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-lowperms.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-lowperms.release.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-lowperms.tag.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.delegator-lowperms.workflow_dispatch.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• slsa-framework/example-trw v2.0.0
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.gcb.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• google-github-actions/auth v2
• google-github-actions/setup-gcloud v2.1.0@98ddc00a17442e89a24bbf282954a3b65ce6d200
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• google-github-actions/auth v2
• google-github-actions/setup-gcloud v2.1.0@98ddc00a17442e89a24bbf282954a3b65ce6d200
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.gcb.workflow_dispatch.main.dockerfile.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• google-github-actions/auth v2
• google-github-actions/setup-gcloud v2.1.0@98ddc00a17442e89a24bbf282954a3b65ce6d200

.github/workflows/e2e.generic.push.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.push.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.push.main.upload-tag-name.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.release.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.schedule.main.adversarial-invalidpath.slsa3.yml

• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.schedule.main.adversarial-invalidsubjects.slsa3.yml

• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.schedule.main.default.slsa3.yml

• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.schedule.main.multi-subjects.slsa3.yml

• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21
• go 1.21

.github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml

• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21
• go 1.21

.github/workflows/e2e.generic.schedule.main.provenance-name.slsa3.yml

• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.tag.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.tag.main.annotated.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.tag.main.assets.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.tag.main.goreleaser-assets-multi-subjects.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• goreleaser/goreleaser-action v5.0.0@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.workflow_dispatch.branch1.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.workflow_dispatch.main.adversarial-builder-binary.slsa3.yml

• slsa-framework/slsa-github-generator v2.1.0
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml

• ramonpetgrave64/slsa-github-generator v2.1.0-rc.3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.workflow_dispatch.main.default.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-format.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-sha256.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.workflow_dispatch.main.tagname.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.generic.workflow_dispatch.main.workflow_inputs.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4
• bazelbuild/setup-bazelisk v3.0.0@b39c379c82683a5f25d34f0d062761f62693e0b2
• actions/upload-artifact v4.3.1@5d5d22a31266ced268874388b861e4b58bb5c2f3
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.push.branch1.config-ldflags.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.push.main.config-ldflags.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.push.main.config-noldflags.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.release.main.config-ldflags-assets-tag.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.release.main.config-ldflags-assets.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.release.main.config-ldflags-noassets.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.schedule.main.adversarial-binary-upload.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.go.schedule.main.adversarial-build-provenance.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.go.schedule.main.adversarial-build.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.go.schedule.main.adversarial-invalidpath.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11

.github/workflows/e2e.go.schedule.main.config-ldflags-main-dir.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.schedule.main.config-ldflags-main.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

.github/workflows/e2e.go.schedule.main.config-noldflags.slsa3.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/download-artifact v4.1.4@c850b930e6ba138125429b7e5c93fc707a7f8427
• actions/setup-go v5.0.0@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• go 1.21

---

• Check this box to trigger a request for Renovate to run again on this repository