ci: disable build provenance by adding comments (intel#4634)

* fixes intel#4580
ffontaine · Dec 19, 2024 · f0de300 · f0de300
1 parent d389887
commit f0de300
Showing 1 changed file with 8 additions and 8 deletions.
diff --git a/.github/workflows/build-wheel.yml b/.github/workflows/build-wheel.yml
@@ -43,12 +43,12 @@ jobs:
       run: |
         echo "tar=$(cd dist/ && echo *.tar.gz)" >> $GITHUB_OUTPUT
         echo "whl=$(cd dist/ && echo *.tar.gz)" >> $GITHUB_OUTPUT
-    - name: Attest Build Provenance for tar
-      uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
-      with:
-        subject-path: "dist/${{ steps.filename.outputs.tar }}"
-    - name: Attest Build Provenance for whl
-      uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
-      with:
-        subject-path: "dist/${{ steps.filename.outputs.whl }}"
+    #- name: Attest Build Provenance for tar
+    #  uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
+    #  with:
+    #    subject-path: "dist/${{ steps.filename.outputs.tar }}"
+    #- name: Attest Build Provenance for whl
+    #  uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
+    #  with:
+    #    subject-path: "dist/${{ steps.filename.outputs.whl }}"
     # TODO Upload to pypi on release creation