From dc0445f429b4e7d993602c902bb4f3b1d040791c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jul 2024 08:44:55 +0100 Subject: [PATCH] Bump actions/attest-build-provenance from 1.3.2 to 1.3.3 (#24) --- .github/workflows/dotnet.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dotnet.yaml b/.github/workflows/dotnet.yaml index a2ec8b5..96882dc 100644 --- a/.github/workflows/dotnet.yaml +++ b/.github/workflows/dotnet.yaml @@ -204,7 +204,7 @@ jobs: name: nuget-package path: packed - name: Attest Build Provenance - uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2 + uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3 with: subject-path: "packed/WoofWare.DotnetRuntimeLocator.*.nupkg" @@ -246,7 +246,7 @@ jobs: run: 'bash ./.github/workflows/assert-contents.sh' - name: Attest Build Provenance if: steps.publish-success.outputs.result == 'published' - uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2 + uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3 with: subject-path: "from-nuget.nupkg"