From 4fad886c2cb9b2da94d75256c7e050f2b71c05f6 Mon Sep 17 00:00:00 2001 From: Ian Lewis Date: Tue, 5 Jul 2022 02:13:13 +0900 Subject: [PATCH] Fix ref to reusable action (#488) Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com> --- .github/workflows/generator_generic_slsa3.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/generator_generic_slsa3.yml b/.github/workflows/generator_generic_slsa3.yml index 3dd692038b..076c54d7ae 100644 --- a/.github/workflows/generator_generic_slsa3.yml +++ b/.github/workflows/generator_generic_slsa3.yml @@ -70,7 +70,7 @@ jobs: steps: - name: Detect the generator ref id: detect - uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@ab345b0851aceba69a2ce8f3d2084f6e7d887850 # v1.1.1 + uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@ab345b0851aceba69a2ce8f3d2084f6e7d887850 # generator builds the generator binary and runs it to generate SLSA # provenance. @@ -143,7 +143,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/') && inputs.upload-to-release == true steps: - name: Download the provenance - uses: slsa-framework/slsa-github-generator/.github/actions/download-artifact@ab345b0851aceba69a2ce8f3d2084f6e7d887850 + uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@ab345b0851aceba69a2ce8f3d2084f6e7d887850 with: name: "${{ needs.generator.outputs.attestation-name }}" sha256: "${{ needs.generator.outputs.attestation-sha256 }}"