Merge pull request #449 from MatthiasValvekens/dependabot/github_acti…

…ons/sigstore/gh-action-sigstore-python-3.0.0 Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0
MatthiasValvekens · Nov 12, 2024 · 848dc8c · 848dc8c
2 parents 71e119a + b38c343
commit 848dc8c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -102,7 +102,7 @@ jobs:
       with:
         repository-url: ${{ vars.REPOSITORY_URL }}
     - name: Sign with sigstore
-      uses: sigstore/gh-action-sigstore-python@v2.1.1
+      uses: sigstore/gh-action-sigstore-python@v3.0.0
       with:
         inputs: ./dist/*
         # useful to inspect workflow artifacts in test runs
@@ -114,7 +114,7 @@ jobs:
         files: |
           dist/*.whl
           dist/*.tar.gz
-          dist/*.sigstore
+          dist/*.sigstore.json
           provenance/multiple.intoto.jsonl
         body_path: release-body/release.md
         fail_on_unmatched_files: true