ci: pin action

philips-software · May 15, 2024 · 9601277 · 9601277
1 parent 40a9827
commit 9601277
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
@@ -99,7 +99,7 @@ jobs:
         with:
           comment-summary-in-pr: on-failure
           fail-on-severity: critical
-      - uses: actions/attest-build-provenance@v1
+      - uses: actions/attest-build-provenance@951c0c5f8e375ad4efad33405ab77f7ded2358e4 # v1.1.1
         with:
           subject-name: ${{ env.REGISTRY }}/${{ github.repository }}-${{ matrix.flavor }}
           subject-digest: ${{ steps.build-and-push.outputs.digest }}