pin actions/attest to v0.1.0 (#22 )

Signed-off-by: Brian DeHamer <bdehamer@github.com>
2024-03-05 13:11:49 -08:00
1 changed files with 1 additions and 1 deletions
--- a/action.yml
+++ b/action.yml
@@ -87,7 +87,7 @@ runs:
      id: generate-sbom-predicate
      with:
        sbom-path: ${{ inputs.sbom-path || steps.sbom-output.outputs.path }}
-    - uses: actions/attest@main
+    - uses: actions/attest@14e407ca15f1b08f4869fc058b059f7f1e434df6 # v0.1.0
      id: attest
      with:
        subject-path: ${{ inputs.subject-path }}