diff options
| author | dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | 2023-03-01 16:57:11 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-03-01 16:57:11 +0000 |
| commit | 6010b6a8dc436679ca3f31ce3183bf10fc31162d (patch) | |
| tree | 34147d16c72aac01f345b701a30a739f8458c88d | |
| parent | 547c745df66a260d336f0dcce8313a3a17cfd6aa (diff) | |
| download | markupsafe-6010b6a8dc436679ca3f31ce3183bf10fc31162d.tar.gz | |
Bump slsa-framework/slsa-github-generator from 1.4.0 to 1.5.0
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
| -rw-r--r-- | .github/workflows/publish.yaml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index e3ce762..99442f9 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -80,7 +80,7 @@ jobs: id-token: write contents: write # Can't pin with hash due to how this workflow works. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.5.0 with: base64-subjects: ${{ needs.hash.outputs.hash }} # When building more wheels, use the Python version as the provenance file name. |