Merge pull request #9575 from cli/dependabot/github_actions/actions/attest-build-provenance-1.4.3

build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3
This commit is contained in:
William Martin 2024-09-09 10:17:38 +02:00 committed by GitHub
commit a3f9d85fc3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -299,7 +299,7 @@ jobs:
rpmsign --addsign dist/*.rpm
- name: Attest release artifacts
if: inputs.environment == 'production'
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
with:
subject-path: "dist/gh_*"
- name: Run createrepo