Fix ref to reusable action (#488)

Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
slsa-framework · Jul 4, 2022 · 4fad886 · 4fad886
1 parent 2b945f5
commit 4fad886
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/generator_generic_slsa3.yml b/.github/workflows/generator_generic_slsa3.yml
@@ -70,7 +70,7 @@ jobs:
     steps:
       - name: Detect the generator ref
         id: detect
-        uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@ab345b0851aceba69a2ce8f3d2084f6e7d887850 # v1.1.1
+        uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@ab345b0851aceba69a2ce8f3d2084f6e7d887850
 
   # generator builds the generator binary and runs it to generate SLSA
   # provenance.
@@ -143,7 +143,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/') && inputs.upload-to-release == true
     steps:
       - name: Download the provenance
-        uses: slsa-framework/slsa-github-generator/.github/actions/download-artifact@ab345b0851aceba69a2ce8f3d2084f6e7d887850
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@ab345b0851aceba69a2ce8f3d2084f6e7d887850
         with:
           name: "${{ needs.generator.outputs.attestation-name }}"
           sha256: "${{ needs.generator.outputs.attestation-sha256 }}"