Merge pull request #9169 from cli/dependabot/github_actions/actions/attest-build-provenance-1.2.0

build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
This commit is contained in:
William Martin 2024-06-10 15:20:15 +02:00 committed by GitHub
commit e36d8f103d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -299,7 +299,7 @@ jobs:
rpmsign --addsign dist/*.rpm
- name: Attest release artifacts
if: inputs.environment == 'production'
uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
uses: actions/attest-build-provenance@49df96e17e918a15956db358890b08e61c704919 # v1.2.0
with:
subject-path: "dist/gh_*"
- name: Run createrepo