mirror of
https://github.com/ko-build/ko.git
synced 2024-11-27 08:21:07 +02:00
Merge pull request #1418 from ko-build/dependabot/github_actions/actions/upload-artifact-4.4.1
This commit is contained in:
commit
e6dd2e9bfd
4
.github/workflows/sbom.yaml
vendored
4
.github/workflows/sbom.yaml
vendored
@ -35,7 +35,7 @@ jobs:
|
|||||||
cosign download sbom $(go run ./ build) | tee spdx.json
|
cosign download sbom $(go run ./ build) | tee spdx.json
|
||||||
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx.json
|
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx.json
|
||||||
|
|
||||||
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
- uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
|
||||||
if: ${{ always() }}
|
if: ${{ always() }}
|
||||||
with:
|
with:
|
||||||
name: spdx.json
|
name: spdx.json
|
||||||
@ -70,7 +70,7 @@ jobs:
|
|||||||
|
|
||||||
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx-multi-arch.json
|
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx-multi-arch.json
|
||||||
|
|
||||||
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
- uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
|
||||||
if: ${{ always() }}
|
if: ${{ always() }}
|
||||||
with:
|
with:
|
||||||
name: spdx-multi-arch.json
|
name: spdx-multi-arch.json
|
||||||
|
Loading…
Reference in New Issue
Block a user