From a7ebc0b235e07cd43a4bd4ba1699c56525997d45 Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Wed, 15 May 2024 16:57:21 +0000 Subject: [PATCH] Pin actions/attest-build-provenance action to 951c0c5 Signed-off-by: Mend Renovate --- .github/workflows/workflow.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml index 2dcc2d2..dda540f 100644 --- a/.github/workflows/workflow.yaml +++ b/.github/workflows/workflow.yaml @@ -173,7 +173,7 @@ jobs: # Match the push condition above if: github.event_name != 'pull_request' # https://github.com/actions/attest-build-provenance - uses: actions/attest-build-provenance@v1.1.1 + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-name: ${{ env.CONTAINER_IMAGE }} subject-digest: ${{ steps.push.outputs.digest }}