fix: typo in maven builder (#2668)

Might be related to slsa-framework/example-package#282 Signed-off-by: AdamKorcz <adam@adalogics.com>
slsa-framework · Aug 21, 2023 · 72aeffd · 72aeffd
1 parent b6d7cbf
commit 72aeffd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/builder_maven_slsa3.yml b/.github/workflows/builder_maven_slsa3.yml
@@ -52,7 +52,7 @@ on:
         # NOTE: This is an "untrusted" value returned from the build. Technically
         # the build could provide a target directory that doesn't match the
         # provenance but it would fail validation.
-        value: ${{ fromJSON(jobs.slsa-run.outputs.build-artifacts-outputs).package-download-name }}
+        value: "${{ fromJSON(jobs.slsa-run.outputs.build-artifacts-outputs).target-download-name }}"
 
       target-download-sha256:
         description: "The sha256 of the target uploaded to the workflow run."