From 02217a99571c33d0c6325e2953967dae0fb35dd9 Mon Sep 17 00:00:00 2001 From: Pavel-Tk <110731619+Pavel-Tk@users.noreply.github.com> Date: Thu, 3 Sep 2026 23:07:07 +0000 Subject: [PATCH] Fix attest-build-provenance pin in the release workflow Signed-off-by: Pavel-Tk <110731619+Pavel-Tk@users.noreply.github.com> --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 45a0656..1e147a7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -108,7 +108,7 @@ jobs: test "$(find dist -maxdepth 1 -type f -printf '%f\n' | sort | tr '\n' ' ')" = \ "SHA256SUMS substrate.zip " (cd dist && sha256sum -c SHA256SUMS) - - uses: actions/attest-build-provenance@e3fe62ef559997059fe8380e7d2b64c4f677262 # pinned + - uses: actions/attest-build-provenance@e3fe62ef559997059fe8380e7d2b64c4f6772 # pinned with: subject-path: "dist/*" - name: Create immutable tag and GitHub release