Skip to content

Commit 1430262

Browse files
ramonpetgrave64ramonpetgrave64
authored
Merge branch 'main' into ramonpetgrave64-use-example-trw-0.0.2
Signed-off-by: Ramon Petgrave <[email protected]>
2 parents e36e0eb + ac358c6 commit 1430262

File tree

147 files changed

+259
-232
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

147 files changed

+259
-232
lines changed

‎.github/workflows/e2e.container-based.push.main.default.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
if: github.event_name == 'push' && github.event.head_commit.message == github.workflow
4747
steps:
4848
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
49-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
49+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
5050
with:
5151
name: ${{ needs.build.outputs.build-outputs-name }}
5252
path: outputs
@@ -56,7 +56,7 @@ jobs:
5656
name=$(find outputs/ -type f | head -1)
5757
cp "${name}" .
5858
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
59-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
59+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
6060
with:
6161
name: ${{ needs.build.outputs.attestations-download-name }}
6262
path: attestations

‎.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
needs: [build]
3434
steps:
3535
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
36-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
36+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
3737
with:
3838
name: ${{ needs.build.outputs.build-outputs-name }}
3939
path: outputs
@@ -43,7 +43,7 @@ jobs:
4343
name=$(find outputs/ -type f | head -1)
4444
cp "$name" .
4545
echo "name=$(basename "$name")" >> "${GITHUB_OUTPUT}"
46-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
46+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
4747
with:
4848
name: ${{ needs.build.outputs.attestations-download-name }}
4949
path: attestations

‎.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -135,7 +135,7 @@ jobs:
135135
needs: [base, build]
136136
steps:
137137
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
138-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
138+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
139139
with:
140140
name: ${{ needs.build.outputs.build-outputs-name }}
141141
path: outputs
@@ -145,7 +145,7 @@ jobs:
145145
name=$(find outputs/ -type f | head -1)
146146
cp "${name}" .
147147
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
148-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
148+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
149149
with:
150150
name: ${{ needs.build.outputs.attestations-download-name }}
151151
path: attestations

‎.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
OUTPUTS: ${{ toJSON(needs.build.outputs) }}
4040
run: echo "${OUTPUTS}"
4141
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
42-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
42+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
4343
with:
4444
name: ${{ needs.build.outputs.build-outputs-name }}
4545
path: outputs
@@ -49,7 +49,7 @@ jobs:
4949
name=$(find outputs/ -type f | head -1)
5050
cp "$name" .
5151
echo "name=$(basename "$name")" >> "${GITHUB_OUTPUT}"
52-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
52+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
5353
with:
5454
name: ${{ needs.build.outputs.attestations-download-name }}
5555
path: attestations

‎.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ jobs:
7474
needs: [base, build]
7575
steps:
7676
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
77-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
77+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7878
with:
7979
name: ${{ needs.build.outputs.build-outputs-name }}
8080
path: outputs
@@ -84,7 +84,7 @@ jobs:
8484
name=$(find outputs/ -type f | head -1)
8585
cp "${name}" .
8686
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
87-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
87+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8888
with:
8989
name: ${{ needs.build.outputs.attestations-download-name }}
9090
path: attestations

‎.github/workflows/e2e.container-based.schedule.main.registry-username.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,7 @@ jobs:
123123
needs: [base, build]
124124
steps:
125125
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
126-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
126+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
127127
with:
128128
name: ${{ needs.build.outputs.build-outputs-name }}
129129
path: outputs
@@ -133,7 +133,7 @@ jobs:
133133
name=$(find outputs/ -type f | head -1)
134134
cp "${name}" .
135135
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
136-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
136+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
137137
with:
138138
name: ${{ needs.build.outputs.attestations-download-name }}
139139
path: attestations

‎.github/workflows/e2e.container-based.tag.main.default.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag'
6161
steps:
6262
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
63-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
63+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
6464
with:
6565
name: ${{ needs.build.outputs.build-outputs-name }}
6666
path: outputs
@@ -70,7 +70,7 @@ jobs:
7070
name=$(find outputs/ -type f | head -1)
7171
cp "${name}" .
7272
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
73-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
73+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7474
with:
7575
name: ${{ needs.build.outputs.attestations-download-name }}
7676
path: attestations

‎.github/workflows/e2e.container-based.workflow_dispatch.main.adversarial-builder-binary.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
contents: write # For asset uploads.
1212
actions: read # For the entrypoint.
1313
# Update the reference in this line with the builder's version to test.
14-
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_container-based_slsa3.yml@v1.9.0
14+
uses: slsa-framework/slsa-github-generator/.github/workflows/builder_container-based_slsa3.yml@v1.10.0
1515
with:
1616
builder-image: "bash"
1717
builder-digest: "sha256:9e2ba52487d945504d250de186cb4fe2e3ba023ed2921dd6ac8b97ed43e76af9"

‎.github/workflows/e2e.container-based.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,8 @@ jobs:
3333
actions: read # For the entrypoint.
3434
# Update the reference in this line with the builder's version to test.
3535
# uses: ianlewis/slsa-github-generator/.github/workflows/[email protected]
36-
uses: laurentsimon/slsa-github-generator/.github/workflows/[email protected]
36+
uses: laurentsimon/slsa-github-generator/.github/workflows/[email protected]
37+
# uses: kpk47/slsa-github-generator/.github/workflows/[email protected]
3738
with:
3839
builder-image: "bash"
3940
builder-digest: "sha256:9e2ba52487d945504d250de186cb4fe2e3ba023ed2921dd6ac8b97ed43e76af9"

‎.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
if: github.event_name == 'workflow_dispatch'
4747
steps:
4848
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
49-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
49+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
5050
with:
5151
name: ${{ needs.build.outputs.build-outputs-name }}
5252
path: outputs
@@ -56,7 +56,7 @@ jobs:
5656
name=$(find outputs/ -type f | head -1)
5757
cp "${name}" .
5858
echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}"
59-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
59+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
6060
with:
6161
name: ${{ needs.build.outputs.attestations-download-name }}
6262
path: attestations

‎.github/workflows/e2e.container.workflow_dispatch.main.adversarial-builder-binary.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ jobs:
7575
id-token: write # For signing.
7676
actions: read # For reading workflow info.
7777
packages: write # For uploading attestations.
78-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.9.0
78+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.10.0
7979
with:
8080
image: ${{ needs.build.outputs.image }}
8181
digest: ${{ needs.build.outputs.digest }}

‎.github/workflows/e2e.container.workflow_dispatch.main.adversarial-verifier-binary.slsa3.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,8 @@ jobs:
7676
actions: read # For reading workflow info.
7777
packages: write # For uploading attestations.
7878
# uses: ianlewis/slsa-github-generator/.github/workflows/[email protected]
79-
uses: laurentsimon/slsa-github-generator/.github/workflows/[email protected]
79+
uses: laurentsimon/slsa-github-generator/.github/workflows/[email protected]
80+
# uses: kpk47/slsa-github-generator/.github/workflows/[email protected]
8081
with:
8182
image: ${{ needs.build.outputs.image }}
8283
digest: ${{ needs.build.outputs.digest }}

‎.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ jobs:
8282
needs: [build]
8383
steps:
8484
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
85-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
85+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8686
with:
8787
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
8888
- uses: slsa-framework/example-trw/high-perms-checkout/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
needs: [build]
7373
steps:
7474
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
75-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
75+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7676
with:
7777
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
7878
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
needs: [build]
7373
steps:
7474
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
75-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
75+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7676
with:
7777
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
7878
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ jobs:
8484
needs: [build]
8585
steps:
8686
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
87-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
87+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8888
with:
8989
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
9090
- uses: slsa-framework/example-trw/high-perms-checkout/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
needs: [build]
7474
steps:
7575
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
76-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
76+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7777
with:
7878
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
7979
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ jobs:
7474
needs: [build]
7575
steps:
7676
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
77-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
77+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7878
with:
7979
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
8080
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ jobs:
8585
needs: [build]
8686
steps:
8787
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
88-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
88+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8989
with:
9090
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
9191
- uses: slsa-framework/example-trw/high-perms-checkout/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ jobs:
7474
needs: [build]
7575
steps:
7676
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
77-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
77+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7878
with:
7979
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
8080
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ jobs:
8484
needs: [build]
8585
steps:
8686
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
87-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
87+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8888
with:
8989
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
9090
- uses: slsa-framework/example-trw/high-perms-checkout/actions/download/[email protected]

‎.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ jobs:
7474
needs: [build]
7575
steps:
7676
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
77-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
77+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7878
with:
7979
name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'.
8080
- uses: slsa-framework/example-trw/high-perms/actions/download/[email protected]

‎.github/workflows/e2e.gcb.push.main.default.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
gcloud artifacts docker images describe "${IMAGE_REGISTRY}/${IMAGE_NAME}@${image_digest}" --show-provenance --format json > provenance.json
7474
echo "provenance-name=provenance.json" >> "${GITHUB_OUTPUT}"
7575
- name: Upload provenance
76-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
76+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
7777
with:
7878
name: ${{ steps.describe.outputs.provenance-name }}
7979
path: ${{ steps.describe.outputs.provenance-name }}
@@ -87,7 +87,7 @@ jobs:
8787
runs-on: ubuntu-latest
8888
steps:
8989
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
90-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
90+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
9191
with:
9292
name: ${{ needs.provenance.outputs.provenance-name }}
9393
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0

‎.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
gcloud artifacts docker images describe "${IMAGE_REGISTRY}/${IMAGE_NAME}@${image_digest}" --show-provenance --format json > provenance.json
7474
echo "provenance-name=provenance.json" >> "${GITHUB_OUTPUT}"
7575
- name: Upload provenance
76-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
76+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
7777
with:
7878
name: ${{ steps.describe.outputs.provenance-name }}
7979
path: ${{ steps.describe.outputs.provenance-name }}
@@ -87,7 +87,7 @@ jobs:
8787
runs-on: ubuntu-latest
8888
steps:
8989
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
90-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
90+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
9191
with:
9292
name: ${{ needs.provenance.outputs.provenance-name }}
9393
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0

‎.github/workflows/e2e.generic.push.branch1.default.slsa3.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root
6464
echo "binary-name=hello" >> "${GITHUB_OUTPUT}"
6565
- name: Upload binary
66-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
66+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
6767
with:
6868
name: ${{ steps.build.outputs.binary-name }}
6969
path: ${{ steps.build.outputs.binary-name }}
@@ -96,10 +96,10 @@ jobs:
9696
if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.event.head_commit.message == github.workflow
9797
steps:
9898
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
99-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
99+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
100100
with:
101101
name: ${{ needs.build.outputs.binary-name }}
102-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
102+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
103103
with:
104104
name: ${{ needs.provenance.outputs.provenance-name }}
105105
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0

‎.github/workflows/e2e.generic.push.main.default.slsa3.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root
4444
echo "binary-name=hello" >>"${GITHUB_OUTPUT}"
4545
- name: Upload binary
46-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
46+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
4747
with:
4848
name: ${{ steps.build.outputs.binary-name }}
4949
path: ${{ steps.build.outputs.binary-name }}
@@ -77,10 +77,10 @@ jobs:
7777
if: github.event_name == 'push' && github.event.head_commit.message == github.workflow
7878
steps:
7979
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
80-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
80+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8181
with:
8282
name: ${{ needs.build.outputs.binary-name }}
83-
- uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
83+
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
8484
with:
8585
name: ${{ needs.provenance.outputs.provenance-name }}
8686
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0

0 commit comments

Comments
 (0)