Skip to content

Commit

Permalink
fix: update slsa-github-generator to v1.2.2 and remove workaround (#3880
Browse files Browse the repository at this point in the history
)

v1.2.2 of slsa-github-generator has been released with fix for the provenance signing issue that required the compile-generator workaround added to unblock our last Jib CLI release. Updating to this version and removing the workaround.
  • Loading branch information
emmileaf committed Nov 28, 2022
1 parent 0511dec commit 21d30f6
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions .github/workflows/jib-cli-release.yml
Expand Up @@ -117,9 +117,8 @@ jobs:
actions: read # To read the workflow path.
id-token: write # To sign the provenance.
contents: write # To add assets to a release.
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.1
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.2
with:
compile-generator: true # Workaround for https://github.com/slsa-framework/slsa-github-generator/issues/1163
base64-subjects: "${{ needs.release.outputs.hashes }}"

upload:
Expand Down

0 comments on commit 21d30f6

Please sign in to comment.