We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 970a1c1 commit 57f02ecCopy full SHA for 57f02ec
.github/workflows/_reusable-sbom-scan.yml
@@ -24,7 +24,7 @@ jobs:
24
with:
25
format: spdx-json
26
output-file: ${{ github.event.repository.name }}-sbom.spdx.json
27
- - uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
+ - uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
28
if: ${{ !(github.event.pull_request.head.repo.fork || github.event.workflow_call.pull_request.head.repo.fork) && !contains(fromJSON('["dependabot[bot]", "renovate[bot]"]'), github.actor) }}
29
30
subject-path: ${{ github.event.repository.name }}-sbom.spdx.json
0 commit comments