From 16427c3e027297bf5da595cf35f65c05b9730238 Mon Sep 17 00:00:00 2001 From: Christopher Hicks Date: Wed, 10 Jun 2026 09:44:34 -0400 Subject: [PATCH] =?UTF-8?q?=E2=98=94=20[gha]=20pin=20slsa-github-generator?= =?UTF-8?q?=20and=20add=20yaml=20header=20line=20for=20zizmor?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Christopher Hicks --- .github/workflows/release.yml | 2 +- .github/zizmor.yml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index aa1fff0..248e924 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -79,7 +79,7 @@ jobs: actions: read id-token: write contents: write - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0 with: base64-subjects: "${{ needs.release.outputs.hashes }}" upload-assets: true diff --git a/.github/zizmor.yml b/.github/zizmor.yml index 569788b..9adf811 100644 --- a/.github/zizmor.yml +++ b/.github/zizmor.yml @@ -1,3 +1,4 @@ +--- rules: unpinned-uses: config: