pin actions/attest reference by commit sha (#493 )

Signed-off-by: Brian DeHamer <bdehamer@github.com>
bump predicate from 1.1.4 to 1.1.5 (#485 )
2025-03-05 11:07:49 -08:00 · 2025-02-27 06:53:28 -08:00
1 changed files with 2 additions and 2 deletions
--- a/action.yml
+++ b/action.yml
@@ -62,9 +62,9 @@ outputs:
 runs:
  using: 'composite'
  steps:
-    - uses: actions/attest-build-provenance/predicate@36fa7d009e22618ca7cd599486979b8150596c74 # predicate@1.1.4
+    - uses: actions/attest-build-provenance/predicate@1176ef556905f349f669722abf30bce1a6e16e01 # predicate@1.1.5
      id: generate-build-provenance-predicate
-    - uses: actions/attest@v2.2.1
+    - uses: actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
      id: attest
      with:
        subject-path: ${{ inputs.subject-path }}
Author	SHA1	Message	Date
Brian DeHamer	c074443f1a	pin actions/attest reference by commit sha (#493 ) Signed-off-by: Brian DeHamer <bdehamer@github.com>	2025-03-05 11:07:49 -08:00
Brian DeHamer	bd77c07785	bump predicate from 1.1.4 to 1.1.5 (#485 ) Signed-off-by: Brian DeHamer <bdehamer@github.com>	2025-02-27 06:53:28 -08:00