GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-18 16:22:33 +01:00
Code Issues Projects Releases Packages Wiki Activity

update slsa gha

Browse source 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
Thomas Sjögren 2023-03-15 16:46:47 +01:00
parent faa0e88479
commit df36db7a70
No known key found for this signature in database
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.github/workflows/slsa.yml vendored
View file

@ -20,7 +20,7 @@ jobs:
shell: bash shell: bash
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@master uses: actions/checkout@27135e314dd1818f797af1db9dae03a9f045786b # master
- name: Build artifacts - name: Build artifacts
run: | run: |
@ -46,10 +46,10 @@ jobs:
actions: read actions: read
id-token: write id-token: write
contents: write contents: write
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.5.0
with: with:
base64-subjects: "${{ needs.build.outputs.hashes }}" base64-subjects: "${{ needs.build.outputs.hashes }}"
upload-assets: true upload-assets: ${{ startsWith(github.ref, 'refs/tags/') }}
release: release:
needs: [build, provenance] needs: [build, provenance]
@ -60,7 +60,7 @@ jobs:
shell: bash shell: bash
- name: Download ${{ env.REPOSITORY_NAME }}.sha256 - name: Download ${{ env.REPOSITORY_NAME }}.sha256
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 uses: actions/download-artifact@cbed621e49e4c01b044d60f6c80ea4ed6328b281 # v2.1.1
with: with:
name: ${{ env.REPOSITORY_NAME }}.sha256 name: ${{ env.REPOSITORY_NAME }}.sha256