From bacd3a5fab8958bfab1bb364170cb0f1ff110fac Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 29 Apr 2026 21:29:11 +0000 Subject: [PATCH] chore(deps): pin slsa-framework/slsa-github-generator action to f7dd8c5 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/release-binaries.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml index e8052ad8..e229f253 100644 --- a/.github/workflows/release-binaries.yml +++ b/.github/workflows/release-binaries.yml @@ -166,7 +166,7 @@ jobs: # generate-builder.sh extracts the version from the ref to download the builder # binary from a GitHub release and rejects non-tag refs. See CI-001 exception # and slsa-framework/slsa-github-generator#150. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0 with: base64-subjects: "${{ needs.combine-hashes.outputs.digests }}" upload-assets: true