Skip to content

Commit 70f334e

Browse files
authored
Merge pull request #4 from NDDev-OpenNetwork/dependabot/github_actions/github-actions-64f2eff7fa
chore(deps): bump actions/attest from 4.2.1 to 4.2.2 in the github-actions group across 1 directory
2 parents 0dd0b0a + a25876f commit 70f334e

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

‎.github/workflows/release-bundle.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -214,13 +214,13 @@ jobs:
214214
215215
- name: Attest release file provenance
216216
id: provenance
217-
uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
217+
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
218218
with:
219219
subject-checksums: ${{ runner.temp }}/gds-release-output/attestation-subjects.sha256
220220

221221
- name: Attest executable bundle SBOM
222222
id: sbom
223-
uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
223+
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
224224
with:
225225
subject-path: ${{ runner.temp }}/gds-release-output/release/gds-bundle-v${{ inputs.version }}.tar.gz
226226
sbom-path: ${{ runner.temp }}/gds-release-output/release/sbom.spdx.json

0 commit comments

Comments
 (0)