From 026f23782c95b4bf4badf8eb8cd23630284326f0 Mon Sep 17 00:00:00 2001 From: Morten Torkildsen Date: Mon, 3 Jun 2024 15:26:54 -0700 Subject: [PATCH] Update slsa-github-generator to address TUF issue (#4159) Signed-off-by: Morten Torkildsen --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c94df5d66..d07897753 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -76,7 +76,7 @@ jobs: actions: read # To read the workflow path. id-token: write # To sign the provenance. contents: write # To add assets to a release. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.1 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 with: compile-generator: true # Workaround for https://github.com/slsa-framework/slsa-github-generator/issues/1163 base64-subjects: "${{ needs.build.outputs.hashes }}"