From 902d655d74d831c9d2ebeb8c43bad786604d16bd Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Wed, 5 Jun 2024 12:43:16 +0000 Subject: [PATCH] chore(build): upgrade slsa framework and verifier Signed-off-by: Luca Guerra --- .github/workflows/release.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index dd39629..b91f294 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -64,7 +64,7 @@ jobs: permissions: read-all steps: - name: Install the verifier - uses: slsa-framework/slsa-verifier/actions/installer@v2.3.0 + uses: slsa-framework/slsa-verifier/actions/installer@v2.5.1 - name: Download assets env: @@ -125,7 +125,7 @@ jobs: actions: read # for detecting the Github Actions environment. id-token: write # for creating OIDC tokens for signing. packages: write # for uploading attestations. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.9.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 with: image: docker.io/falcosecurity/k8s-metacollector # The image digest is used to prevent TOCTOU issues.