From 783809879f09b97d64c565710839275bf7bf113f Mon Sep 17 00:00:00 2001 From: Victor Martinez Date: Wed, 15 May 2024 09:12:25 +0200 Subject: [PATCH] github-action: use actions/attest-build-provenance (#313) --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 44262aae..bbf50454 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -98,11 +98,11 @@ jobs: run: tar xvf ${{ env.TARBALL_FILE }} - name: generate build provenance (jar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/libs/*.jar" - name: generate build provenance (aar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/outputs/aar/*.aar" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7745d1e6..27c99dd4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -85,12 +85,12 @@ jobs: run: tar xvf ${{ env.TARBALL_FILE }} - name: generate build provenance (jar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/libs/*.jar" - name: generate build provenance (aar files) - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1 with: subject-path: "${{ github.workspace }}/**/build/outputs/aar/*.aar"