From c3fcd00538c0080076b87f14e63f7db4010e9e7d Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 29 Apr 2024 09:46:57 +0200 Subject: [PATCH] Use newer version of the generate attestation action - no more early access --- .github/workflows/build-binary-signed-ghat-malicious.yml | 2 +- .github/workflows/build-binary-signed-ghat.yml | 2 +- .github/workflows/build-binary-unsigned.yml | 2 +- .github/workflows/build-image-signed-ghat-malicious.yml | 2 +- .github/workflows/build-image-signed-ghat-static-copied.yml | 2 +- .github/workflows/build-image-signed-ghat-static.yml | 2 +- .github/workflows/build-image-signed-ghat.yml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build-binary-signed-ghat-malicious.yml b/.github/workflows/build-binary-signed-ghat-malicious.yml index fa86c1e..e8fe7f1 100644 --- a/.github/workflows/build-binary-signed-ghat-malicious.yml +++ b/.github/workflows/build-binary-signed-ghat-malicious.yml @@ -25,7 +25,7 @@ jobs: # ... # # - name: Sign artifact -# uses: github-early-access/generate-build-provenance@main +# uses: actions/attest-build-provenance@v1.0.0 # with: # subject-path: '${{ github.workspace }}/demo-repo-go-binary' # diff --git a/.github/workflows/build-binary-signed-ghat.yml b/.github/workflows/build-binary-signed-ghat.yml index e815acb..b4da6b1 100644 --- a/.github/workflows/build-binary-signed-ghat.yml +++ b/.github/workflows/build-binary-signed-ghat.yml @@ -21,7 +21,7 @@ jobs: # ... # # - name: Sign artifact -# uses: github-early-access/generate-build-provenance@main +# uses: actions/attest-build-provenance@v1.0.0 # with: # subject-path: '${{ github.workspace }}/demo-repo-go-binary' # diff --git a/.github/workflows/build-binary-unsigned.yml b/.github/workflows/build-binary-unsigned.yml index db5b8ec..27120f6 100644 --- a/.github/workflows/build-binary-unsigned.yml +++ b/.github/workflows/build-binary-unsigned.yml @@ -21,7 +21,7 @@ jobs: # ... # # - name: Sign artifact -# uses: github-early-access/generate-build-provenance@main +# uses: actions/attest-build-provenance@v1.0.0 # with: # subject-path: '${{ github.workspace }}/demo-repo-go-binary' # diff --git a/.github/workflows/build-image-signed-ghat-malicious.yml b/.github/workflows/build-image-signed-ghat-malicious.yml index 0921ea9..d863a2c 100644 --- a/.github/workflows/build-image-signed-ghat-malicious.yml +++ b/.github/workflows/build-image-signed-ghat-malicious.yml @@ -34,7 +34,7 @@ jobs: context: . - name: Attest image - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@v1.0.0 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push-step.outputs.digest }} diff --git a/.github/workflows/build-image-signed-ghat-static-copied.yml b/.github/workflows/build-image-signed-ghat-static-copied.yml index d03734e..c8982b1 100644 --- a/.github/workflows/build-image-signed-ghat-static-copied.yml +++ b/.github/workflows/build-image-signed-ghat-static-copied.yml @@ -31,7 +31,7 @@ jobs: file : Dockerfile.static - name: Attest image - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@v1.0.0 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push-step.outputs.digest }} diff --git a/.github/workflows/build-image-signed-ghat-static.yml b/.github/workflows/build-image-signed-ghat-static.yml index bfc3eac..bd3d0a0 100644 --- a/.github/workflows/build-image-signed-ghat-static.yml +++ b/.github/workflows/build-image-signed-ghat-static.yml @@ -31,7 +31,7 @@ jobs: file : Dockerfile.static - name: Attest image - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@v1.0.0 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push-step.outputs.digest }} diff --git a/.github/workflows/build-image-signed-ghat.yml b/.github/workflows/build-image-signed-ghat.yml index 0edc6b6..f7286f4 100644 --- a/.github/workflows/build-image-signed-ghat.yml +++ b/.github/workflows/build-image-signed-ghat.yml @@ -30,7 +30,7 @@ jobs: context: . - name: Attest image - uses: github-early-access/generate-build-provenance@main + uses: actions/attest-build-provenance@v1.0.0 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push-step.outputs.digest }}