From 3a87795c210b0604764807e6b941f65005d08519 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 5 Aug 2024 13:14:12 +0100 Subject: [PATCH] Bump actions/attest-build-provenance from 1.3.3 to 1.4.0 (#34) --- .github/workflows/dotnet.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dotnet.yaml b/.github/workflows/dotnet.yaml index f7803e8..f523803 100644 --- a/.github/workflows/dotnet.yaml +++ b/.github/workflows/dotnet.yaml @@ -202,7 +202,7 @@ jobs: name: nuget-package path: packed - name: Attest Build Provenance - uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3 + uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0 with: subject-path: "packed/WoofWare.PrattParser.*.nupkg" @@ -244,7 +244,7 @@ jobs: run: 'bash ./.github/workflows/assert-contents.sh' - name: Attest Build Provenance if: steps.publish-success.outputs.result == 'published' - uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3 + uses: actions/attest-build-provenance@210c1913531870065f03ce1f9440dd87bc0938cd # v1.4.0 with: subject-path: "from-nuget.nupkg"