From 4dd0c44c27f2c68d1509a245badf93fc1d94b1b2 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 20 Mar 2025 03:34:49 +0000 Subject: [PATCH] chore(deps): update actions/attest-build-provenance action to v2.2.3 --- .github/workflows/build_all.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build_all.yml b/.github/workflows/build_all.yml index 409fdd9..767f181 100644 --- a/.github/workflows/build_all.yml +++ b/.github/workflows/build_all.yml @@ -126,7 +126,7 @@ jobs: --compression-format=zstd - name: Attest (main) - uses: actions/attest-build-provenance@bd77c077858b8d561b7a36cbe48ef4cc642ca39d # v2.2.2 + uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 if: github.event_name != 'pull_request' with: subject-name: ghcr.io/${{ github.repository }} @@ -191,7 +191,7 @@ jobs: TIME: ${{ steps.manifest-time.outputs.images }} - name: Attest (Tag resign) (latest) - uses: actions/attest-build-provenance@bd77c077858b8d561b7a36cbe48ef4cc642ca39d # v2.2.2 + uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.get-digest-only.outputs.digest-latest }} @@ -204,7 +204,7 @@ jobs: cosign sign --yes --recursive ${IMAGES} - name: Attest (Tag resign) (time) - uses: actions/attest-build-provenance@bd77c077858b8d561b7a36cbe48ef4cc642ca39d # v2.2.2 + uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.get-digest-only.outputs.digest-time }}