fix: update Slsa rules

UlisesGascon · Jun 25, 2023 · 44daeb2 · 44daeb2
1 parent bfd5114
commit 44daeb2
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/publish_in_npm.yml b/.github/workflows/publish_in_npm.yml
@@ -3,6 +3,12 @@ on:
   release:
     types:
       - created
+
+permissions:
+  id-token: write # For signing
+  contents: read  # For repo checkout.
+  actions: read   # For getting workflow run info.
+
 jobs:
   prepare:
     runs-on: ubuntu-latest
@@ -20,7 +26,7 @@ jobs:
         run: npm ci
   publish:
     needs: prepare
-    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@5dfe44f2f2806e28957c9de7aaa1fb9973921187
+    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_nodejs_slsa3.yml@e55b76ce421082dfa4b34a6ac3c5e59de0f3bb58 #1.7.0
     with:
       node-version: 18.16.0
       run-scripts: "ci"