chore(deps): pin actions/attest-sbom action to aaa2d0a

kitten-science · May 29, 2024 · 8ceff2b · 8ceff2b
1 parent f17f5b7
commit 8ceff2b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/userscript-nightly.yml b/.github/workflows/userscript-nightly.yml
@@ -65,7 +65,7 @@ jobs:
           upload-release-assets: false
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@v1
+        uses: actions/attest-sbom@aaa2d0a82e0853a3aea99fcf632b9b61cdb534c2 # v1
         with:
           subject-path: packages/kitten-scientists/output/*
           sbom-path: sbom.spdx.json

diff --git a/.github/workflows/userscript-publish.yml b/.github/workflows/userscript-publish.yml
@@ -60,7 +60,7 @@ jobs:
           upload-release-assets: false
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@v1
+        uses: actions/attest-sbom@aaa2d0a82e0853a3aea99fcf632b9b61cdb534c2 # v1
         with:
           subject-path: packages/kitten-scientists/output/*
           sbom-path: sbom.spdx.json

diff --git a/.github/workflows/userscript-tagged-release.yml b/.github/workflows/userscript-tagged-release.yml
@@ -42,7 +42,7 @@ jobs:
           upload-release-assets: false
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@v1
+        uses: actions/attest-sbom@aaa2d0a82e0853a3aea99fcf632b9b61cdb534c2 # v1
         with:
           subject-path: packages/kitten-scientists/output/*
           sbom-path: sbom.spdx.json