From 05284cc010427c8e668506e6fd59910e6a72e2f2 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Tue, 5 Mar 2024 11:06:06 -0800 Subject: [PATCH] pin predicate action to 0.1.0 (#20) Signed-off-by: Brian DeHamer --- action.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/action.yml b/action.yml index 7c16afa..13c866e 100644 --- a/action.yml +++ b/action.yml @@ -48,6 +48,7 @@ inputs: The GitHub token used to make authenticated API requests. default: ${{ github.token }} required: false + outputs: bundle-path: description: 'The path to the file containing the attestation bundle(s).' @@ -82,7 +83,7 @@ runs: path: ${{ inputs.scan-path }} output-file: ${{ steps.sbom-output.outputs.path }} format: ${{ steps.check-sbom-format.outputs.format }} - - uses: actions/attest-sbom/predicate@main + - uses: actions/attest-sbom/predicate@847c6befa7ce187c962fa6c3e6cd3c96e4da9565 # predicate@0.1.0 id: generate-sbom-predicate with: sbom-path: ${{ inputs.sbom-path || steps.sbom-output.outputs.path }} @@ -92,9 +93,9 @@ runs: subject-path: ${{ inputs.subject-path }} subject-digest: ${{ inputs.subject-digest }} subject-name: ${{ inputs.subject-name }} - push-to-registry: ${{ inputs.push-to-registry }} predicate-type: ${{ steps.generate-sbom-predicate.outputs.predicate-type }} predicate-path: ${{ steps.generate-sbom-predicate.outputs.predicate-path }} + push-to-registry: ${{ inputs.push-to-registry }} github-token: ${{ inputs.github-token }}