diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index b1b30982..67b78063 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -60,7 +60,7 @@ jobs: id-token: write # To sign the provenance. packages: write # To upload assets to release. actions: read # To read the workflow path. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 with: image: ghcr.io/${{ github.repository_owner }}/capsule-proxy digest: "${{ needs.publish-images.outputs.capsule-digest }}" diff --git a/.github/workflows/helm-publish.yml b/.github/workflows/helm-publish.yml index 598d82b4..f0b002d2 100644 --- a/.github/workflows/helm-publish.yml +++ b/.github/workflows/helm-publish.yml @@ -72,7 +72,7 @@ jobs: id-token: write # To sign the provenance. packages: write # To upload assets to release. actions: read # To read the workflow path. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 with: image: ghcr.io/${{ github.repository_owner }}/charts/capsule-proxy digest: "${{ needs.publish-helm-oci.outputs.chart-digest }}"