Bump slsa-provenance-action to v0.7.0

Signed-off-by: Marco Franssen <marco.franssen@philips.com>
philips-labs · Feb 15, 2022 · 0a9e574 · 0a9e574
1 parent 768da7b
commit 0a9e574
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/golang.yml b/.github/workflows/golang.yml
@@ -119,11 +119,11 @@ jobs:
 
     steps:
       - name: Generate provenance for release
-        uses: philips-labs/slsa-provenance-action@v0.4.0
+        uses: philips-labs/slsa-provenance-action@v0.7.0
         with:
-          artifact_path: release-assets
-          output_path: 'build.provenance'
-          tag_name: "${{ github.ref_name }}"
+          command: generate
+          subcommand: github-release
+          arguments: --artifact-path release-assets --output-path provenance.att --tag-name ${{ github.ref_name }}
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"