From 6b72c05f431a1f8edb32b5b44c2240f4706a7280 Mon Sep 17 00:00:00 2001 From: martincostello Date: Sat, 28 Feb 2026 11:54:19 +0000 Subject: [PATCH] Migrate to actions/attest Migrate from now-deprecated attestation action to `actions/attest`. --- .github/workflows/build.yml | 2 +- .github/workflows/dependabot-approve.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7c9fae43d1a..0b5b277b2b5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -402,7 +402,7 @@ jobs: } - name: Attest artifacts - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 with: subject-path: | ./artifacts/polly.spdx.json diff --git a/.github/workflows/dependabot-approve.yml b/.github/workflows/dependabot-approve.yml index 73338317526..cd705316c14 100644 --- a/.github/workflows/dependabot-approve.yml +++ b/.github/workflows/dependabot-approve.yml @@ -39,7 +39,7 @@ jobs: - name: Approve pull request and enable auto-merge shell: bash if: | - contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/attest-build-provenance') || + contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/attest') || contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/cache') || contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/checkout') || contains(steps.dependabot-metadata.outputs.dependency-names, 'actions/create-github-app-token') ||