diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ce50ea4..cdcad77 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -92,13 +92,13 @@ jobs: env: ARTIFACTS: ${{ steps.goreleaser.outputs.artifacts }} - name: Publish Container Attestations - uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 + uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4 with: subject-name: ${{ steps.image_metadata.outputs.name }} subject-digest: ${{ steps.image_metadata.outputs.digest }} push-to-registry: true - name: Publish Attestations - uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 + uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4 with: subject-path: | dist/*.tar.gz