Merge pull request #117 from marcransome/slsa-provenance-pin-version-tag

Pin SLSA reusable workflow using git tag
marcransome · Mar 23, 2024 · e898e5c · e898e5c
2 parents 03d9728 + b7f8709
commit e898e5c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/slsa.yml b/.github/workflows/slsa.yml
@@ -36,6 +36,6 @@ jobs:
       actions: read
       id-token: write
       contents: write
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@c747fe7769adf3656dc7d588b161cb614d7abfee # v1.10.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected] # Must specify version tag; see https://github.com/slsa-framework/slsa-verifier/issues/12
     with:
       base64-subjects: "${{ needs.build.outputs.hashes }}"