Merge pull request #11154 from k8s-infra-cherrypick-robot/cherry-pick-11122-to-release/2.0

[release/2.0] build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
This commit is contained in:
Maksym Pavlenko 2024-12-13 11:41:59 -08:00 committed by GitHub
commit e206c07edc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -149,7 +149,7 @@ jobs:
path: builds
- name: Attest Artifacts
id: attest
uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
with:
subject-path: ./builds/release-tars-**/*.tar.gz
- name: Rename attestation artifact