From 4fe6af9be384204c31d1dc462098264f0954be80 Mon Sep 17 00:00:00 2001 From: Noah Elzner Date: Tue, 24 Oct 2023 13:49:15 -0500 Subject: [PATCH] Revert "Make sigstore reliant actions point to my fork" Point actions back to slsa-framework/...@main This reverts commit 1c61d2a95877f3f1ed80003c1de535ecbd41199a. --- .github/workflows/builder_bazel_slsa3.yml | 4 ++-- .github/workflows/delegator_lowperms-generic_slsa3.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/builder_bazel_slsa3.yml b/.github/workflows/builder_bazel_slsa3.yml index 58c6e0fb09..129a13f922 100644 --- a/.github/workflows/builder_bazel_slsa3.yml +++ b/.github/workflows/builder_bazel_slsa3.yml @@ -86,7 +86,7 @@ jobs: steps: - name: Generate the token id: generate - uses: enteraga6/slsa-github-generator/actions/delegator/setup-generic@sigstore1.8-revert + uses: slsa-framework/slsa-github-generator/actions/delegator/setup-generic@main with: slsa-workflow-recipient: "delegator_lowperms-generic_slsa3.yml" slsa-rekor-log-public: ${{ inputs.rekor-log-public }} @@ -100,6 +100,6 @@ jobs: id-token: write # For signing. contents: read # For asset uploads. actions: read # For the entrypoint. - uses: enteraga6/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@sigstore1.8-revert + uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@main with: slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }} diff --git a/.github/workflows/delegator_lowperms-generic_slsa3.yml b/.github/workflows/delegator_lowperms-generic_slsa3.yml index a954b01356..b3d0a68ad1 100644 --- a/.github/workflows/delegator_lowperms-generic_slsa3.yml +++ b/.github/workflows/delegator_lowperms-generic_slsa3.yml @@ -105,7 +105,7 @@ jobs: steps: - name: Verify token id: verify - uses: enteraga6/slsa-github-generator/.github/actions/verify-token@sigstore1.8-revert + uses: slsa-framework/slsa-github-generator/.github/actions/verify-token@main with: slsa-workflow-recipient: "delegator_lowperms-generic_slsa3.yml" slsa-unverified-token: ${{ inputs.slsa-token }} @@ -278,7 +278,7 @@ jobs: - name: Sign attestations id: sign - uses: enteraga6/slsa-github-generator/.github/actions/sign-attestations@sigstore1.8-revert + uses: slsa-framework/slsa-github-generator/.github/actions/sign-attestations@main with: attestations: attestations output-folder: "${{ needs.rng.outputs.value }}-slsa-attestations"