pin predicate action to 0.1.0 (#20)

Signed-off-by: Brian DeHamer <[email protected]>
This commit is contained in:
Brian DeHamer
2024-03-05 11:06:06 -08:00
committed by GitHub
parent 847c6befa7
commit 05284cc010
+3 -2
View File
@@ -48,6 +48,7 @@ inputs:
The GitHub token used to make authenticated API requests. The GitHub token used to make authenticated API requests.
default: ${{ github.token }} default: ${{ github.token }}
required: false required: false
outputs: outputs:
bundle-path: bundle-path:
description: 'The path to the file containing the attestation bundle(s).' description: 'The path to the file containing the attestation bundle(s).'
@@ -82,7 +83,7 @@ runs:
path: ${{ inputs.scan-path }} path: ${{ inputs.scan-path }}
output-file: ${{ steps.sbom-output.outputs.path }} output-file: ${{ steps.sbom-output.outputs.path }}
format: ${{ steps.check-sbom-format.outputs.format }} format: ${{ steps.check-sbom-format.outputs.format }}
- uses: actions/attest-sbom/predicate@main - uses: actions/attest-sbom/predicate@847c6befa7ce187c962fa6c3e6cd3c96e4da9565 # [email protected]
id: generate-sbom-predicate id: generate-sbom-predicate
with: with:
sbom-path: ${{ inputs.sbom-path || steps.sbom-output.outputs.path }} sbom-path: ${{ inputs.sbom-path || steps.sbom-output.outputs.path }}
@@ -92,9 +93,9 @@ runs:
subject-path: ${{ inputs.subject-path }} subject-path: ${{ inputs.subject-path }}
subject-digest: ${{ inputs.subject-digest }} subject-digest: ${{ inputs.subject-digest }}
subject-name: ${{ inputs.subject-name }} subject-name: ${{ inputs.subject-name }}
push-to-registry: ${{ inputs.push-to-registry }}
predicate-type: predicate-type:
${{ steps.generate-sbom-predicate.outputs.predicate-type }} ${{ steps.generate-sbom-predicate.outputs.predicate-type }}
predicate-path: predicate-path:
${{ steps.generate-sbom-predicate.outputs.predicate-path }} ${{ steps.generate-sbom-predicate.outputs.predicate-path }}
push-to-registry: ${{ inputs.push-to-registry }}
github-token: ${{ inputs.github-token }} github-token: ${{ inputs.github-token }}