From c1474032c05676c3445cb7596db5609eb6388cf1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Jun 2023 04:04:32 +0000 Subject: [PATCH] Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0 Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0) --- updated-dependencies: - dependency-name: slsa-framework/slsa-github-generator dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/publish.yml | 6 +++--- .github/workflows/rc.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a760affe..2b65acdc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: contents: read actions: read needs: prepare - uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.6.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.7.0 with: run-scripts: "install-deps, style, nx-build-skip-cache, nx-test-skip-cache" node-version: "16.20.0" diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index bcf18669..9f9c8639 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: (github.event_name == 'workflow_dispatch' && startsWith(github.ref, 'refs/tags/v')) || (startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, '-rc.')) # Deterministic Build & tests - uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.6.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.7.0 with: run-scripts: "install-deps, style, nx-build-skip-cache, nx-test-skip-cache, skip-lib-ignore" node-version: "16.20.0" @@ -52,14 +52,14 @@ jobs: echo "path=${temp_dir}" >>"${GITHUB_OUTPUT}" - name: Download tarball - uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@934435652996c02a6317092984312602dfaf2a21 # main + uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@v1.7.0 # main with: name: ${{ needs.provenance.outputs.package-download-name }} path: "${{ steps.temp-dir.outputs.path }}/${{ needs.provenance.outputs.package-name }}" sha256: ${{ needs.provenance.outputs.package-download-sha256 }} - name: Download provenance - uses: slsa-framework/slsa-github-generator/actions/nodejs/secure-attestations-download@0779f7bec68e2bf54a7b0a32bf4763f25ab29702 # v1.6.0 + uses: slsa-framework/slsa-github-generator/actions/nodejs/secure-attestations-download@v1.7.0 # v1.6.0 with: name: ${{ needs.provenance.outputs.provenance-download-name }} path: "${{ steps.temp-dir.outputs.path }}" diff --git a/.github/workflows/rc.yml b/.github/workflows/rc.yml index 41179e58..5f64f515 100644 --- a/.github/workflows/rc.yml +++ b/.github/workflows/rc.yml @@ -59,7 +59,7 @@ jobs: contents: read actions: read needs: prepare - uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.6.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@v1.7.0 with: run-scripts: "install-deps, style, nx-build-skip-cache, nx-test-skip-cache" node-version: "16.20.0"