pin actions/attest to v0.1.0 (#25)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2024-03-05 13:11:46 -08:00 committed by GitHub
parent 4520623c01
commit 252cd7f619
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -42,7 +42,7 @@ runs:
steps:
- uses: actions/attest-build-provenance/predicate@56a361a16034268025aa760d300531128e298f1c # predicate@0.1.0
id: generate-build-provenance-predicate
- uses: actions/attest@main
- uses: actions/attest@14e407ca15f1b08f4869fc058b059f7f1e434df6 # v0.1.0
id: attest
with:
subject-path: ${{ inputs.subject-path }}