Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-08-17 19:20:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

ci: match version of actions/download-artifact for slsa provenance (#2957)

Browse source
This commit is contained in:
Malte Poll 2024-02-29 09:39:41 +01:00 • committed by GitHub
parent f5c5413284
commit 0b6eeb3747
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.github/workflows/draft-release.yml vendored
View file

@ -345,7 +345,9 @@ jobs:
name: constellation.spdx.sbom
- name: Download provenance
uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
# Need to use the same major version as slsa-github-generator to find uploaded artifacts
# https://github.com/slsa-framework/slsa-github-generator/issues/3068
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with:
name: ${{ needs.provenance.outputs.provenance-name }}
@ -428,7 +430,9 @@ jobs:
name: constellation.spdx.sbom.sig
- name: Download Constellation provenance
uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
# Need to use the same major version as slsa-github-generator to find uploaded artifacts
# https://github.com/slsa-framework/slsa-github-generator/issues/3068
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with:
name: ${{ needs.provenance.outputs.provenance-name }}