1
0
mirror of https://github.com/ko-build/ko.git synced 2024-11-27 08:21:07 +02:00

Merge pull request #1418 from ko-build/dependabot/github_actions/actions/upload-artifact-4.4.1

This commit is contained in:
Carlos Tadeu Panato Junior 2024-10-08 08:15:52 +02:00 committed by GitHub
commit e6dd2e9bfd
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -35,7 +35,7 @@ jobs:
cosign download sbom $(go run ./ build) | tee spdx.json cosign download sbom $(go run ./ build) | tee spdx.json
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx.json java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx.json
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0 - uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
if: ${{ always() }} if: ${{ always() }}
with: with:
name: spdx.json name: spdx.json
@ -70,7 +70,7 @@ jobs:
java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx-multi-arch.json java -jar ./tools-java-${SPDX_TOOLS_VERSION}-jar-with-dependencies.jar Verify spdx-multi-arch.json
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0 - uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v4.4.1
if: ${{ always() }} if: ${{ always() }}
with: with:
name: spdx-multi-arch.json name: spdx-multi-arch.json