diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 44262aae..bbf50454 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -98,11 +98,11 @@ jobs: run: tar xvf ${{ env.TARBALL_FILE }} - name: generate build provenance (jar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/libs/*.jar" - name: generate build provenance (aar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/outputs/aar/*.aar" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7745d1e6..27c99dd4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -85,12 +85,12 @@ jobs: run: tar xvf ${{ env.TARBALL_FILE }} - name: generate build provenance (jar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/libs/*.jar" - name: generate build provenance (aar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/outputs/aar/*.aar"