|
40 | 40 | packages: write # for uploading attestations. (https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#known-issues) |
41 | 41 | # Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
42 | 42 | if: github.repository == 'argoproj/argo-cd' |
43 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 |
| 43 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.1.0 |
44 | 44 | with: |
45 | 45 | image: quay.io/argoproj/argocd |
46 | 46 | digest: ${{ needs.argocd-image.outputs.image-digest }} |
@@ -128,7 +128,7 @@ jobs: |
128 | 128 | contents: write # Needed for release uploads |
129 | 129 | if: github.repository == 'argoproj/argo-cd' |
130 | 130 | # Must be refernced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
131 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 131 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
132 | 132 | with: |
133 | 133 | base64-subjects: '${{ needs.goreleaser.outputs.hashes }}' |
134 | 134 | provenance-name: 'argocd-cli.intoto.jsonl' |
@@ -213,7 +213,7 @@ jobs: |
213 | 213 | contents: write # Needed for release uploads |
214 | 214 | if: github.repository == 'argoproj/argo-cd' |
215 | 215 | # Must be referenced by a tag. https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md#referencing-the-slsa-generator |
216 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 216 | + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 |
217 | 217 | with: |
218 | 218 | base64-subjects: '${{ needs.generate-sbom.outputs.hashes }}' |
219 | 219 | provenance-name: 'argocd-sbom.intoto.jsonl' |
|
0 commit comments