Merge pull request #12558 from cli/dependabot/github_actions/actions/attest-build-provenance-3.2.0

chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0
This commit is contained in:
Kynan Ware 2026-02-03 10:43:42 -07:00 committed by GitHub
commit db19b778ad
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -334,7 +334,7 @@ jobs:
rpmsign --addsign dist/*.rpm
- name: Attest release artifacts
if: inputs.environment == 'production'
uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
with:
subject-path: "dist/gh_*"
create-storage-record: false # (default: true)