From a4e09c7c237195a6b32f44f216be5128ce91e3a5 Mon Sep 17 00:00:00 2001 From: Nicolas-Peiffer <102670102+Nicolas-Peiffer@users.noreply.github.com> Date: Thu, 14 Nov 2024 18:44:48 +0100 Subject: [PATCH] fix generator_container_slsa3 action tag Signed-off-by: Nicolas-Peiffer <102670102+Nicolas-Peiffer@users.noreply.github.com> --- .github/workflows/base-container-build.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/base-container-build.yaml b/.github/workflows/base-container-build.yaml index 82e93ea..697ec07 100644 --- a/.github/workflows/base-container-build.yaml +++ b/.github/workflows/base-container-build.yaml @@ -116,7 +116,7 @@ jobs: id-token: write # for creating OIDC tokens for signing. Required for SLSA and Cosign packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues) # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 with: image: ghcr.io/${{ github.repository }}-base digest: ${{ needs.build-base-image.outputs.oci-image-digest }} @@ -214,7 +214,7 @@ jobs: id-token: write # for creating OIDC tokens for signing. Required for SLSA and Cosign packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues) # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 with: image: ghcr.io/${{ github.repository }} digest: ${{ needs.build-goreleaser-entryp-image.outputs.oci-image-digest }}