diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8f276c9..0389f5e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -97,7 +97,7 @@ jobs: - if: ${{ inputs.artifact-action == 'build-release' }} name: "Attest artifact" - uses: actions/attest-build-provenance@534b352d658f90498fd148d231fdbf88f3886a3a # v1.3.1 + uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1 with: subject-path: | dist/*.tar.gz @@ -180,7 +180,7 @@ jobs: - if: ${{ inputs.image-action == 'build-release' }} name: "Attest image" - uses: actions/attest-build-provenance@534b352d658f90498fd148d231fdbf88f3886a3a # v1.3.1 + uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1 with: subject-name: "${{ env.REGISTRY }}/${{ steps.build-image.outputs.image }}" subject-digest: ${{ steps.push-image.outputs.digest }}