Skip to content

Commit

Permalink
Resolve issue with attestation publishing (#569)
Browse files Browse the repository at this point in the history
  • Loading branch information
collins-w authored Sep 23, 2024
1 parent 6bb42f0 commit 1d9dbd4
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@ jobs:
- name: Enable NPM PROVENANCE
run: echo "NPM_CONFIG_PROVENANCE=true" >> $GITHUB_ENV

- name: Create Release Pull Request or Publish to npm
- name: Publish to NPM
id: changesets
uses: changesets/action@aba318e9165b45b7948c60273e0b72fce0a64eb9 # v1.4.7
with:
Expand All @@ -113,14 +113,12 @@ jobs:
uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741

- name: Upload attestations SLSA
if: steps.changesets.outputs.id != ''
uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0
with:
subject-path: ${{ needs.provenance.outputs.provenance-download-name }}
subject-name: ${{ github.event.repository.name }}-${{ inputs.version_tag }}

- name: Upload attestations SBOM
if: steps.changesets.outputs.id != ''
uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0
with:
subject-path: /${{ steps.temp-dir.outputs.path }}/sbom-${{ github.event.repository.name }}-${{ inputs.version_tag }}.spdx.json

0 comments on commit 1d9dbd4

Please sign in to comment.