Turns out slsa verifier hasn't been updated yet, see https://github.com/slsa-framework/slsa-verifier/pull/37

This commit is contained in:
David Dworken 2022-04-24 21:07:20 -07:00
parent 7a1162bf75
commit 1aa08a3a4d

View File

@ -28,7 +28,7 @@ jobs:
id-token: write
contents: read
needs: args
uses: slsa-framework/slsa-github-generator-go/.github/workflows/slsa3_builder.yml@main # TODO: use hash upon release.
uses: slsa-framework/slsa-github-generator-go/.github/workflows/builder.yml@@2b2bf8753ae8ab14332b72217daf3c2c670272b3
with:
go-version: 1.17
env: "VERSION_LDFLAGS:${{needs.args.outputs.ldflags}}"