Merge pull request #164 from DeusData/dependabot/github_actions/actions/attest-build-provenance-4.1.0

Bump actions/attest-build-provenance from 2.4.0 to 4.1.0
This commit is contained in:
DeusData
2026-03-29 11:56:16 +02:00
committed by GitHub
+3 -3
View File
@@ -716,17 +716,17 @@ jobs:
# ── Artifact attestations (SLSA provenance) ──────────────
- name: Attest build provenance (tar.gz)
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
with:
subject-path: '*.tar.gz'
- name: Attest build provenance (zip)
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
with:
subject-path: '*.zip'
- name: Attest build provenance (checksums)
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
with:
subject-path: 'checksums.txt'