From 77e753201658d5e4d8b7d8f5b08d50fb64308baa Mon Sep 17 00:00:00 2001 From: Akash Kumar <91385321+AkashKumar7902@users.noreply.github.com> Date: Mon, 18 May 2026 16:33:51 +0530 Subject: [PATCH] ci: pin slsa provenance workflow (#1903) Signed-off-by: Akash Kumar --- .github/workflows/docker-publish.yml | 2 +- .github/workflows/helm-publish.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 402f4225..cb04cde0 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -60,7 +60,7 @@ jobs: id-token: write # To sign the provenance. packages: write # To upload assets to release. actions: read # To read the workflow path. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.1.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0 with: image: ghcr.io/${{ github.repository_owner }}/capsule digest: "${{ needs.publish-images.outputs.capsule-digest }}" diff --git a/.github/workflows/helm-publish.yml b/.github/workflows/helm-publish.yml index c4e28042..7cee9b7c 100644 --- a/.github/workflows/helm-publish.yml +++ b/.github/workflows/helm-publish.yml @@ -73,7 +73,7 @@ jobs: id-token: write # To sign the provenance. packages: write # To upload assets to release. actions: read # To read the workflow path. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.1.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0 with: image: ghcr.io/${{ github.repository_owner }}/charts/capsule digest: "${{ needs.publish-helm-oci.outputs.chart-digest }}"