From f5141c6343c61362635c81d7d1dcfd7b1ef734b2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Dec 2023 05:25:57 +0000 Subject: [PATCH] :arrow_up: Bump philips-labs/slsa-provenance-action from 0.8.0 to 0.9.0 Bumps [philips-labs/slsa-provenance-action](https://github.com/philips-labs/slsa-provenance-action) from 0.8.0 to 0.9.0. - [Release notes](https://github.com/philips-labs/slsa-provenance-action/releases) - [Changelog](https://github.com/philips-labs/slsa-provenance-action/blob/main/.goreleaser.draft.yml) - [Commits](https://github.com/philips-labs/slsa-provenance-action/compare/752766b8a3b1ebd09d599e163eeec8fa39e677aa...6b2fd198d38ba72fb3cc08fbc52da2ebaef2efad) --- updated-dependencies: - dependency-name: philips-labs/slsa-provenance-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/example-publish.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 7b562fc1..1da60fcb 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -192,7 +192,7 @@ jobs: steps: - name: Generate provenance for Release - uses: philips-labs/slsa-provenance-action@752766b8a3b1ebd09d599e163eeec8fa39e677aa # ratchet:philips-labs/slsa-provenance-action@v0.8.0 + uses: philips-labs/slsa-provenance-action@6b2fd198d38ba72fb3cc08fbc52da2ebaef2efad # ratchet:philips-labs/slsa-provenance-action@v0.9.0 with: command: generate subcommand: github-release @@ -242,7 +242,7 @@ jobs: cosign-release: 'v2.2.1' - name: Generate provenance for ${{ matrix.repo }} - uses: philips-labs/slsa-provenance-action@752766b8a3b1ebd09d599e163eeec8fa39e677aa # ratchet:philips-labs/slsa-provenance-action@v0.8.0 + uses: philips-labs/slsa-provenance-action@6b2fd198d38ba72fb3cc08fbc52da2ebaef2efad # ratchet:philips-labs/slsa-provenance-action@v0.9.0 with: command: generate subcommand: container diff --git a/.github/workflows/example-publish.yaml b/.github/workflows/example-publish.yaml index d60423e6..3a934e8f 100644 --- a/.github/workflows/example-publish.yaml +++ b/.github/workflows/example-publish.yaml @@ -25,7 +25,7 @@ jobs: - name: Download build artifact uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # ratchet:actions/download-artifact@v3.0.2 - name: Generate provenance - uses: philips-labs/slsa-provenance-action@752766b8a3b1ebd09d599e163eeec8fa39e677aa # ratchet:philips-labs/slsa-provenance-action@v0.8.0 + uses: philips-labs/slsa-provenance-action@6b2fd198d38ba72fb3cc08fbc52da2ebaef2efad # ratchet:philips-labs/slsa-provenance-action@v0.9.0 with: command: generate subcommand: files