From c4b1d663a3e42162f54e4929c39829793052c970 Mon Sep 17 00:00:00 2001 From: Sebastian Schuberth Date: Thu, 27 Jun 2024 11:28:06 +0200 Subject: [PATCH] fix(github): Be explicit about artifact paths to attest for Work-around [1] and only attest the main artifacts, not the signature files. [1]: https://github.com/actions/attest-build-provenance/issues/133 Signed-off-by: Sebastian Schuberth --- .github/workflows/release.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index bdfe2ef490f43..499d8f7b36a9b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -59,5 +59,7 @@ jobs: uses: actions/attest-build-provenance@v1 with: subject-path: | - ./cli/build/distributions/ort-$ORT_VERSION.{tgz,zip}* - ./helper-cli/build/distributions/orth-$ORT_VERSION.{tgz,zip}* + ./cli/build/distributions/ort-$ORT_VERSION.tgz + ./cli/build/distributions/ort-$ORT_VERSION.zip + ./helper-cli/build/distributions/orth-$ORT_VERSION.tgz + ./helper-cli/build/distributions/orth-$ORT_VERSION.zip