1
0
mirror of https://github.com/bitdefender/bddisasm.git synced 2024-12-22 14:08:08 +00:00

ci: Attest provenance for each build artefact, not just the archives

This commit is contained in:
Anichitei Ionel-Cristinel 2024-05-08 10:25:53 +03:00 committed by GitHub
parent 9cd9c58607
commit 0086ea6edf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -98,9 +98,11 @@ jobs:
tar.exe -acf x86-windows-release.zip bin\Win32\Release
- name: Attest Build Provenance
if: ${{ github.event_name == 'release' }}
uses: actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940 # v1.0.0
uses: actions/attest-build-provenance@v1.1.0
with:
subject-path: '*-windows-release.zip'
subject-path: |
'bin/**/Release/*'
'*-windows-release.zip'
- name: Release
if: ${{ github.event_name == 'release' }}
uses: AButler/upload-release-assets@v2.0.2