From bb041697684166b4f21f33a02c03ecdd1a8ad973 Mon Sep 17 00:00:00 2001 From: laurentsimon <64505099+laurentsimon@users.noreply.github.com> Date: Wed, 20 Mar 2024 09:52:14 -0700 Subject: [PATCH] Revert "update to download-artifact@v4" --- .../e2e.container-based.push.main.default.slsa3.yml | 4 ++-- ...e.container-based.schedule.main.default.slsa3.yml | 4 ++-- ...sed.schedule.main.gcp-workload-identity.slsa3.yml | 4 ++-- ...2e.container-based.schedule.main.matrix.slsa3.yml | 4 ++-- ...-based.schedule.main.registry-username-secret.yml | 4 ++-- ...ntainer-based.schedule.main.registry-username.yml | 4 ++-- .../e2e.container-based.tag.main.default.slsa3.yml | 4 ++-- ...er-based.workflow_dispatch.main.default.slsa3.yml | 4 ++-- ....delegator-generic.create.main.checkout.slsa3.yml | 2 +- ...e.delegator-generic.create.main.default.slsa3.yml | 2 +- ...e2e.delegator-generic.push.main.default.slsa3.yml | 2 +- ...delegator-generic.release.main.checkout.slsa3.yml | 2 +- ....delegator-generic.release.main.default.slsa3.yml | 2 +- .../e2e.delegator-generic.tag.main.default.slsa3.yml | 2 +- ...eric.workflow_dispatch.branch1.checkout.slsa3.yml | 2 +- ...neric.workflow_dispatch.branch1.default.slsa3.yml | 2 +- ...generic.workflow_dispatch.main.checkout.slsa3.yml | 2 +- ...-generic.workflow_dispatch.main.default.slsa3.yml | 2 +- .../workflows/e2e.gcb.push.main.default.slsa3.yml | 4 ++-- .../e2e.gcb.tag.main.annotated-build.slsa3.yml | 4 ++-- .../e2e.generic.push.branch1.default.slsa3.yml | 6 +++--- .../e2e.generic.push.main.default.slsa3.yml | 6 +++--- .../e2e.generic.push.main.upload-tag-name.slsa3.yml | 6 +++--- .../e2e.generic.release.main.default.slsa3.yml | 6 +++--- ...c.schedule.main.adversarial-invalidpath.slsa3.yml | 2 +- ...hedule.main.adversarial-invalidsubjects.slsa3.yml | 2 +- ....generic.schedule.main.attestation-name.slsa3.yml | 6 +++--- .../e2e.generic.schedule.main.default.slsa3.yml | 6 +++--- ...2e.generic.schedule.main.multi-subjects.slsa3.yml | 8 ++++---- .../e2e.generic.schedule.main.multi-uses.slsa3.yml | 12 ++++++------ .../e2e.generic.tag.branch1.default.slsa3.yml | 6 +++--- .../e2e.generic.tag.main.annotated.slsa3.yml | 6 +++--- .../workflows/e2e.generic.tag.main.assets.slsa3.yml | 6 +++--- ...neric.workflow_dispatch.branch1.default.slsa3.yml | 6 +++--- ....generic.workflow_dispatch.main.default.slsa3.yml | 6 +++--- ....main.large-subjects-adversarial-format.slsa3.yml | 2 +- ....main.large-subjects-adversarial-sha256.slsa3.yml | 2 +- ...c.workflow_dispatch.main.large-subjects.slsa3.yml | 6 +++--- ....generic.workflow_dispatch.main.tagname.slsa3.yml | 4 ++-- ....workflow_dispatch.main.workflow_inputs.slsa3.yml | 6 +++--- .../e2e.go.push.branch1.config-ldflags.slsa3.yml | 4 ++-- .../e2e.go.push.main.config-ldflags.slsa3.yml | 4 ++-- .../e2e.go.push.main.config-noldflags.slsa3.yml | 4 ++-- ....release.main.config-ldflags-assets-tag.slsa3.yml | 4 ++-- ...e.go.release.main.config-ldflags-assets.slsa3.yml | 4 ++-- ...go.release.main.config-ldflags-noassets.slsa3.yml | 4 ++-- ...o.schedule.main.config-ldflags-main-dir.slsa3.yml | 4 ++-- ...2e.go.schedule.main.config-ldflags-main.slsa3.yml | 4 ++-- .../e2e.go.schedule.main.config-noldflags.slsa3.yml | 4 ++-- ...e.go.schedule.main.noldflags-multi-uses.slsa3.yml | 8 ++++---- ...2e.go.tag.branch1.config-ldflags-assets.slsa3.yml | 4 ++-- ...ag.main.config-ldflags-assets-draft-tag.slsa3.yml | 4 ++-- ...in.config-ldflags-assets-prerelease-tag.slsa3.yml | 4 ++-- ...e.go.tag.main.config-ldflags-assets-tag.slsa3.yml | 4 ++-- .../e2e.go.tag.main.config-ldflags-assets.slsa3.yml | 4 ++-- ...e2e.go.tag.main.config-ldflags-noassets.slsa3.yml | 4 ++-- ...orkflow_dispatch.branch1.config-ldflags.slsa3.yml | 4 ++-- ...workflow_dispatch.main.config-noldflags.slsa3.yml | 4 ++-- ...orkflow_dispatch.main.tagname-noldflags.slsa3.yml | 2 +- ...dispatch.main.workflow_inputs-noldflags.slsa3.yml | 4 ++-- ...fier-e2e.all.workflow_dispatch.main.all.slsa3.yml | 2 +- 61 files changed, 127 insertions(+), 127 deletions(-) diff --git a/.github/workflows/e2e.container-based.push.main.default.slsa3.yml b/.github/workflows/e2e.container-based.push.main.default.slsa3.yml index 93ee48490a..fe18f27f00 100644 --- a/.github/workflows/e2e.container-based.push.main.default.slsa3.yml +++ b/.github/workflows/e2e.container-based.push.main.default.slsa3.yml @@ -46,7 +46,7 @@ jobs: if: github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -56,7 +56,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml b/.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml index 55bcd4b568..dfa87006c4 100644 --- a/.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml +++ b/.github/workflows/e2e.container-based.schedule.main.default.slsa3.yml @@ -33,7 +33,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -43,7 +43,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "$name" . echo "name=$(basename "$name")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml b/.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml index 0b554ca512..eb4d5c36c6 100644 --- a/.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml +++ b/.github/workflows/e2e.container-based.schedule.main.gcp-workload-identity.slsa3.yml @@ -135,7 +135,7 @@ jobs: needs: [base, build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -145,7 +145,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml b/.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml index 38e74adc73..cea94f90d8 100644 --- a/.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml +++ b/.github/workflows/e2e.container-based.schedule.main.matrix.slsa3.yml @@ -39,7 +39,7 @@ jobs: OUTPUTS: ${{ toJSON(needs.build.outputs) }} run: echo "${OUTPUTS}" - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -49,7 +49,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "$name" . echo "name=$(basename "$name")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml b/.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml index 89395ccebc..673ce54ff5 100644 --- a/.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml +++ b/.github/workflows/e2e.container-based.schedule.main.registry-username-secret.yml @@ -74,7 +74,7 @@ jobs: needs: [base, build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -84,7 +84,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.schedule.main.registry-username.yml b/.github/workflows/e2e.container-based.schedule.main.registry-username.yml index ecd3fd8e0c..5d3d7a572e 100644 --- a/.github/workflows/e2e.container-based.schedule.main.registry-username.yml +++ b/.github/workflows/e2e.container-based.schedule.main.registry-username.yml @@ -123,7 +123,7 @@ jobs: needs: [base, build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -133,7 +133,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.tag.main.default.slsa3.yml b/.github/workflows/e2e.container-based.tag.main.default.slsa3.yml index 49aeafe5a5..4f8956294b 100644 --- a/.github/workflows/e2e.container-based.tag.main.default.slsa3.yml +++ b/.github/workflows/e2e.container-based.tag.main.default.slsa3.yml @@ -60,7 +60,7 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -70,7 +70,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml b/.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml index 972d51a432..065ad50941 100644 --- a/.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml +++ b/.github/workflows/e2e.container-based.workflow_dispatch.main.default.slsa3.yml @@ -46,7 +46,7 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.build-outputs-name }} path: outputs @@ -56,7 +56,7 @@ jobs: name=$(find outputs/ -type f | head -1) cp "${name}" . echo "name=$(basename "${name}")" >> "${GITHUB_OUTPUT}" - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.attestations-download-name }} path: attestations diff --git a/.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml b/.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml index 3ea3bc1c60..ec87111fbf 100644 --- a/.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.create.main.checkout.slsa3.yml @@ -82,7 +82,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml index c72e5c9c5c..7dde2a7f56 100644 --- a/.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.create.main.default.slsa3.yml @@ -72,7 +72,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml index 20f1c6c8cc..762f0a9111 100644 --- a/.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.push.main.default.slsa3.yml @@ -72,7 +72,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml b/.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml index 097f44a746..a93279fd12 100644 --- a/.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.release.main.checkout.slsa3.yml @@ -84,7 +84,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml index 318f37ec52..29a5228223 100644 --- a/.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.release.main.default.slsa3.yml @@ -73,7 +73,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml index bf826585b5..c22a69efa6 100644 --- a/.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.tag.main.default.slsa3.yml @@ -74,7 +74,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml b/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml index 2d5b9f3956..3c3f3e6bad 100644 --- a/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.checkout.slsa3.yml @@ -85,7 +85,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml index adbc06dc47..9d4c5b1366 100644 --- a/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.workflow_dispatch.branch1.default.slsa3.yml @@ -74,7 +74,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml b/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml index db55ed478b..319f4dec0d 100644 --- a/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.checkout.slsa3.yml @@ -84,7 +84,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms-checkout/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml b/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml index 8fc45c2682..d87d69d118 100644 --- a/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml +++ b/.github/workflows/e2e.delegator-generic.workflow_dispatch.main.default.slsa3.yml @@ -74,7 +74,7 @@ jobs: needs: [build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: "${{ needs.build.outputs.artifact }}" # NOTE: This is 'my-artifact'. - uses: slsa-framework/example-trw/high-perms/actions/download/attestation@v0.0.1 diff --git a/.github/workflows/e2e.gcb.push.main.default.slsa3.yml b/.github/workflows/e2e.gcb.push.main.default.slsa3.yml index 8ba00963f4..3bdf88f761 100644 --- a/.github/workflows/e2e.gcb.push.main.default.slsa3.yml +++ b/.github/workflows/e2e.gcb.push.main.default.slsa3.yml @@ -73,7 +73,7 @@ jobs: gcloud artifacts docker images describe "${IMAGE_REGISTRY}/${IMAGE_NAME}@${image_digest}" --show-provenance --format json > provenance.json echo "provenance-name=provenance.json" >> "${GITHUB_OUTPUT}" - name: Upload provenance - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.describe.outputs.provenance-name }} path: ${{ steps.describe.outputs.provenance-name }} @@ -87,7 +87,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml b/.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml index 918a71dd6b..018fa2a37c 100644 --- a/.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml +++ b/.github/workflows/e2e.gcb.tag.main.annotated-build.slsa3.yml @@ -73,7 +73,7 @@ jobs: gcloud artifacts docker images describe "${IMAGE_REGISTRY}/${IMAGE_NAME}@${image_digest}" --show-provenance --format json > provenance.json echo "provenance-name=provenance.json" >> "${GITHUB_OUTPUT}" - name: Upload provenance - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.describe.outputs.provenance-name }} path: ${{ steps.describe.outputs.provenance-name }} @@ -87,7 +87,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.push.branch1.default.slsa3.yml b/.github/workflows/e2e.generic.push.branch1.default.slsa3.yml index 79d792fc44..d06af39048 100644 --- a/.github/workflows/e2e.generic.push.branch1.default.slsa3.yml +++ b/.github/workflows/e2e.generic.push.branch1.default.slsa3.yml @@ -63,7 +63,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -96,10 +96,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.push.main.default.slsa3.yml b/.github/workflows/e2e.generic.push.main.default.slsa3.yml index f6593accef..88effdfd55 100644 --- a/.github/workflows/e2e.generic.push.main.default.slsa3.yml +++ b/.github/workflows/e2e.generic.push.main.default.slsa3.yml @@ -43,7 +43,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >>"${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -77,10 +77,10 @@ jobs: if: github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.push.main.upload-tag-name.slsa3.yml b/.github/workflows/e2e.generic.push.main.upload-tag-name.slsa3.yml index 0711c52116..7a21ccda66 100644 --- a/.github/workflows/e2e.generic.push.main.upload-tag-name.slsa3.yml +++ b/.github/workflows/e2e.generic.push.main.upload-tag-name.slsa3.yml @@ -51,7 +51,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -92,10 +92,10 @@ jobs: if: github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.release.main.default.slsa3.yml b/.github/workflows/e2e.generic.release.main.default.slsa3.yml index eef0e06349..680944f84e 100644 --- a/.github/workflows/e2e.generic.release.main.default.slsa3.yml +++ b/.github/workflows/e2e.generic.release.main.default.slsa3.yml @@ -59,7 +59,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -92,10 +92,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'release' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.schedule.main.adversarial-invalidpath.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.adversarial-invalidpath.slsa3.yml index 62b683301e..775dafecf9 100644 --- a/.github/workflows/e2e.generic.schedule.main.adversarial-invalidpath.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.adversarial-invalidpath.slsa3.yml @@ -24,7 +24,7 @@ jobs: echo "artifact2" > artifact2 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts if-no-files-found: error diff --git a/.github/workflows/e2e.generic.schedule.main.adversarial-invalidsubjects.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.adversarial-invalidsubjects.slsa3.yml index 7f5ff4c082..ca11e43ac8 100644 --- a/.github/workflows/e2e.generic.schedule.main.adversarial-invalidsubjects.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.adversarial-invalidsubjects.slsa3.yml @@ -24,7 +24,7 @@ jobs: echo "artifact2" > artifact2 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts if-no-files-found: error diff --git a/.github/workflows/e2e.generic.schedule.main.attestation-name.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.attestation-name.slsa3.yml index 94664c7a8e..abd3883af4 100644 --- a/.github/workflows/e2e.generic.schedule.main.attestation-name.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.attestation-name.slsa3.yml @@ -31,7 +31,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -65,11 +65,11 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - name: Setup Go diff --git a/.github/workflows/e2e.generic.schedule.main.default.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.default.slsa3.yml index f310d48658..58197ff1ef 100644 --- a/.github/workflows/e2e.generic.schedule.main.default.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.default.slsa3.yml @@ -31,7 +31,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -64,11 +64,11 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - name: Setup Go diff --git a/.github/workflows/e2e.generic.schedule.main.multi-subjects.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.multi-subjects.slsa3.yml index c15c46d7f2..a35252fb7e 100644 --- a/.github/workflows/e2e.generic.schedule.main.multi-subjects.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.multi-subjects.slsa3.yml @@ -25,7 +25,7 @@ jobs: echo "artifact3" > artifact3 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts if-no-files-found: error @@ -62,11 +62,11 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: artifacts - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - name: Setup Go @@ -97,7 +97,7 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - name: Setup Go diff --git a/.github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml b/.github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml index 0b3bbd1a77..bcfd152e2e 100644 --- a/.github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml +++ b/.github/workflows/e2e.generic.schedule.main.multi-uses.slsa3.yml @@ -23,7 +23,7 @@ jobs: echo "build 1 artifact 1" > artifact1 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts1 if-no-files-found: error @@ -59,11 +59,11 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: artifacts1 - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance-one.outputs.provenance-name }} - name: Setup Go @@ -87,7 +87,7 @@ jobs: echo "build 2 artifact 1" > artifact1 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts2 if-no-files-found: error @@ -126,11 +126,11 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: artifacts2 - name: Download provenance - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance-two.outputs.provenance-name }} - name: Setup Go diff --git a/.github/workflows/e2e.generic.tag.branch1.default.slsa3.yml b/.github/workflows/e2e.generic.tag.branch1.default.slsa3.yml index b88cd10a12..13cdec5618 100644 --- a/.github/workflows/e2e.generic.tag.branch1.default.slsa3.yml +++ b/.github/workflows/e2e.generic.tag.branch1.default.slsa3.yml @@ -61,7 +61,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -94,10 +94,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.tag.main.annotated.slsa3.yml b/.github/workflows/e2e.generic.tag.main.annotated.slsa3.yml index 1ea1848da5..e076df994f 100644 --- a/.github/workflows/e2e.generic.tag.main.annotated.slsa3.yml +++ b/.github/workflows/e2e.generic.tag.main.annotated.slsa3.yml @@ -49,7 +49,7 @@ jobs: echo "build 1 artifact 1" > artifact1 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: path: artifact1 name: artifact1 @@ -83,10 +83,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: artifact1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.tag.main.assets.slsa3.yml b/.github/workflows/e2e.generic.tag.main.assets.slsa3.yml index 1469032568..583c859b08 100644 --- a/.github/workflows/e2e.generic.tag.main.assets.slsa3.yml +++ b/.github/workflows/e2e.generic.tag.main.assets.slsa3.yml @@ -57,7 +57,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -91,10 +91,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.workflow_dispatch.branch1.default.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.branch1.default.slsa3.yml index 7ba205a95a..7946c22fe0 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.branch1.default.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.branch1.default.slsa3.yml @@ -46,7 +46,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -79,10 +79,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.default.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.default.slsa3.yml index 50b501dea0..56684febbd 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.default.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.default.slsa3.yml @@ -42,7 +42,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -75,10 +75,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-format.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-format.slsa3.yml index 2c01f83894..2222e69d3e 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-format.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-format.slsa3.yml @@ -37,7 +37,7 @@ jobs: echo "hello world" > hello echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-sha256.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-sha256.slsa3.yml index c993726be4..4d822f7d11 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-sha256.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects-adversarial-sha256.slsa3.yml @@ -37,7 +37,7 @@ jobs: echo "hello world" > hello echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects.slsa3.yml index 9662c3eb7f..83fac50a43 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.large-subjects.slsa3.yml @@ -37,7 +37,7 @@ jobs: echo "hello world" > hello echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -89,10 +89,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.tagname.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.tagname.slsa3.yml index efc9265b97..eb762a1fc7 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.tagname.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.tagname.slsa3.yml @@ -38,7 +38,7 @@ jobs: echo "build 1 artifact 1" > artifact1 - name: Upload artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: artifacts1 if-no-files-found: error @@ -78,7 +78,7 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download binary - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: artifacts1 - name: Download provenance diff --git a/.github/workflows/e2e.generic.workflow_dispatch.main.workflow_inputs.slsa3.yml b/.github/workflows/e2e.generic.workflow_dispatch.main.workflow_inputs.slsa3.yml index b1214d2daa..da27dd7f8d 100644 --- a/.github/workflows/e2e.generic.workflow_dispatch.main.workflow_inputs.slsa3.yml +++ b/.github/workflows/e2e.generic.workflow_dispatch.main.workflow_inputs.slsa3.yml @@ -47,7 +47,7 @@ jobs: cp bazel-bin/hello_/hello . # Copy binary from Bazel path to root echo "binary-name=hello" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.binary-name }} path: ${{ steps.build.outputs.binary-name }} @@ -80,10 +80,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.provenance.outputs.provenance-name }} - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.push.branch1.config-ldflags.slsa3.yml b/.github/workflows/e2e.go.push.branch1.config-ldflags.slsa3.yml index 71de05188d..999792a183 100644 --- a/.github/workflows/e2e.go.push.branch1.config-ldflags.slsa3.yml +++ b/.github/workflows/e2e.go.push.branch1.config-ldflags.slsa3.yml @@ -99,10 +99,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.push.main.config-ldflags.slsa3.yml b/.github/workflows/e2e.go.push.main.config-ldflags.slsa3.yml index 651e19358e..cee2d3c1f6 100644 --- a/.github/workflows/e2e.go.push.main.config-ldflags.slsa3.yml +++ b/.github/workflows/e2e.go.push.main.config-ldflags.slsa3.yml @@ -70,10 +70,10 @@ jobs: if: github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.push.main.config-noldflags.slsa3.yml b/.github/workflows/e2e.go.push.main.config-noldflags.slsa3.yml index e1e6ba55a2..fd9d0ef615 100644 --- a/.github/workflows/e2e.go.push.main.config-noldflags.slsa3.yml +++ b/.github/workflows/e2e.go.push.main.config-noldflags.slsa3.yml @@ -45,10 +45,10 @@ jobs: if: github.event_name == 'push' && github.event.head_commit.message == github.workflow steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.release.main.config-ldflags-assets-tag.slsa3.yml b/.github/workflows/e2e.go.release.main.config-ldflags-assets-tag.slsa3.yml index 327b56d54b..a58dd46aab 100644 --- a/.github/workflows/e2e.go.release.main.config-ldflags-assets-tag.slsa3.yml +++ b/.github/workflows/e2e.go.release.main.config-ldflags-assets-tag.slsa3.yml @@ -96,10 +96,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'release' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.release.main.config-ldflags-assets.slsa3.yml b/.github/workflows/e2e.go.release.main.config-ldflags-assets.slsa3.yml index f719a98822..25b3985187 100644 --- a/.github/workflows/e2e.go.release.main.config-ldflags-assets.slsa3.yml +++ b/.github/workflows/e2e.go.release.main.config-ldflags-assets.slsa3.yml @@ -96,10 +96,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'release' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.release.main.config-ldflags-noassets.slsa3.yml b/.github/workflows/e2e.go.release.main.config-ldflags-noassets.slsa3.yml index fd9e5fb436..708737e607 100644 --- a/.github/workflows/e2e.go.release.main.config-ldflags-noassets.slsa3.yml +++ b/.github/workflows/e2e.go.release.main.config-ldflags-noassets.slsa3.yml @@ -83,10 +83,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'release' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.schedule.main.config-ldflags-main-dir.slsa3.yml b/.github/workflows/e2e.go.schedule.main.config-ldflags-main-dir.slsa3.yml index e20f35773c..74da4f6d6c 100644 --- a/.github/workflows/e2e.go.schedule.main.config-ldflags-main-dir.slsa3.yml +++ b/.github/workflows/e2e.go.schedule.main.config-ldflags-main-dir.slsa3.yml @@ -68,10 +68,10 @@ jobs: needs: build steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.schedule.main.config-ldflags-main.slsa3.yml b/.github/workflows/e2e.go.schedule.main.config-ldflags-main.slsa3.yml index 0b1217481e..52239eefa6 100644 --- a/.github/workflows/e2e.go.schedule.main.config-ldflags-main.slsa3.yml +++ b/.github/workflows/e2e.go.schedule.main.config-ldflags-main.slsa3.yml @@ -60,10 +60,10 @@ jobs: needs: build steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.schedule.main.config-noldflags.slsa3.yml b/.github/workflows/e2e.go.schedule.main.config-noldflags.slsa3.yml index 2279b7a482..a2dbf60277 100644 --- a/.github/workflows/e2e.go.schedule.main.config-noldflags.slsa3.yml +++ b/.github/workflows/e2e.go.schedule.main.config-noldflags.slsa3.yml @@ -32,10 +32,10 @@ jobs: needs: build steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.schedule.main.noldflags-multi-uses.slsa3.yml b/.github/workflows/e2e.go.schedule.main.noldflags-multi-uses.slsa3.yml index 7f78dffeca..fba6ae22a4 100644 --- a/.github/workflows/e2e.go.schedule.main.noldflags-multi-uses.slsa3.yml +++ b/.github/workflows/e2e.go.schedule.main.noldflags-multi-uses.slsa3.yml @@ -32,10 +32,10 @@ jobs: needs: build-one steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build-one.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build-one.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 @@ -81,10 +81,10 @@ jobs: needs: build-two steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build-two.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build-two.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.branch1.config-ldflags-assets.slsa3.yml b/.github/workflows/e2e.go.tag.branch1.config-ldflags-assets.slsa3.yml index 7da2fca8f2..aee687738a 100644 --- a/.github/workflows/e2e.go.tag.branch1.config-ldflags-assets.slsa3.yml +++ b/.github/workflows/e2e.go.tag.branch1.config-ldflags-assets.slsa3.yml @@ -83,10 +83,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-draft-tag.slsa3.yml b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-draft-tag.slsa3.yml index 19098bdda8..d925728596 100644 --- a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-draft-tag.slsa3.yml +++ b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-draft-tag.slsa3.yml @@ -92,10 +92,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-prerelease-tag.slsa3.yml b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-prerelease-tag.slsa3.yml index a46f32960c..4277420080 100644 --- a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-prerelease-tag.slsa3.yml +++ b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-prerelease-tag.slsa3.yml @@ -98,10 +98,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-tag.slsa3.yml b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-tag.slsa3.yml index 5879374dbe..d065be0a5a 100644 --- a/.github/workflows/e2e.go.tag.main.config-ldflags-assets-tag.slsa3.yml +++ b/.github/workflows/e2e.go.tag.main.config-ldflags-assets-tag.slsa3.yml @@ -97,10 +97,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.main.config-ldflags-assets.slsa3.yml b/.github/workflows/e2e.go.tag.main.config-ldflags-assets.slsa3.yml index c1f489b8fa..26788fdeb5 100644 --- a/.github/workflows/e2e.go.tag.main.config-ldflags-assets.slsa3.yml +++ b/.github/workflows/e2e.go.tag.main.config-ldflags-assets.slsa3.yml @@ -85,10 +85,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.tag.main.config-ldflags-noassets.slsa3.yml b/.github/workflows/e2e.go.tag.main.config-ldflags-noassets.slsa3.yml index 6a8f1f4a94..486f45dd33 100644 --- a/.github/workflows/e2e.go.tag.main.config-ldflags-noassets.slsa3.yml +++ b/.github/workflows/e2e.go.tag.main.config-ldflags-noassets.slsa3.yml @@ -84,10 +84,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'push' && github.ref_type == 'tag' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.workflow_dispatch.branch1.config-ldflags.slsa3.yml b/.github/workflows/e2e.go.workflow_dispatch.branch1.config-ldflags.slsa3.yml index ece9c2e002..5cb7d5cd13 100644 --- a/.github/workflows/e2e.go.workflow_dispatch.branch1.config-ldflags.slsa3.yml +++ b/.github/workflows/e2e.go.workflow_dispatch.branch1.config-ldflags.slsa3.yml @@ -90,10 +90,10 @@ jobs: if: needs.shim.outputs.continue == 'yes' && github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.workflow_dispatch.main.config-noldflags.slsa3.yml b/.github/workflows/e2e.go.workflow_dispatch.main.config-noldflags.slsa3.yml index 5ef29c2e3a..49a4bc9660 100644 --- a/.github/workflows/e2e.go.workflow_dispatch.main.config-noldflags.slsa3.yml +++ b/.github/workflows/e2e.go.workflow_dispatch.main.config-noldflags.slsa3.yml @@ -44,10 +44,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/e2e.go.workflow_dispatch.main.tagname-noldflags.slsa3.yml b/.github/workflows/e2e.go.workflow_dispatch.main.tagname-noldflags.slsa3.yml index 445bc71bf8..1199c6d2f9 100644 --- a/.github/workflows/e2e.go.workflow_dispatch.main.tagname-noldflags.slsa3.yml +++ b/.github/workflows/e2e.go.workflow_dispatch.main.tagname-noldflags.slsa3.yml @@ -46,7 +46,7 @@ jobs: needs: [release, build] steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - name: Download provenance diff --git a/.github/workflows/e2e.go.workflow_dispatch.main.workflow_inputs-noldflags.slsa3.yml b/.github/workflows/e2e.go.workflow_dispatch.main.workflow_inputs-noldflags.slsa3.yml index 07328ba1c7..4c100397e9 100644 --- a/.github/workflows/e2e.go.workflow_dispatch.main.workflow_inputs-noldflags.slsa3.yml +++ b/.github/workflows/e2e.go.workflow_dispatch.main.workflow_inputs-noldflags.slsa3.yml @@ -52,10 +52,10 @@ jobs: if: github.event_name == 'workflow_dispatch' steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }} - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: ${{ needs.build.outputs.go-binary-name }}.intoto.jsonl - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/verifier-e2e.all.workflow_dispatch.main.all.slsa3.yml b/.github/workflows/verifier-e2e.all.workflow_dispatch.main.all.slsa3.yml index 8291ec7251..53b0f62aa2 100644 --- a/.github/workflows/verifier-e2e.all.workflow_dispatch.main.all.slsa3.yml +++ b/.github/workflows/verifier-e2e.all.workflow_dispatch.main.all.slsa3.yml @@ -76,7 +76,7 @@ jobs: cp bazel-bin/hello_/hello "${BINARY_NAME}" # Copy binary from Bazel path to root echo "gha_generic_binary-name=$BINARY_NAME" >> "${GITHUB_OUTPUT}" - name: Upload binary - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 with: name: ${{ steps.build.outputs.gha_generic_binary-name }} path: ${{ steps.build.outputs.gha_generic_binary-name }}