diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2b7ac002..d36cc101 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -177,9 +177,16 @@ jobs: curl -fsSL "${BASE_URL}/v${CHGLOG_VERSION}/${FILENAME}" |sudo tar xz --no-same-owner -C /usr/local/bin git-chglog git-chglog --config .github/chglog/config.yml --output CHANGELOG.md "${GITHUB_REF_NAME}" - - name: Download build artifacts + - name: Download python build artifacts + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + with: + name: "python-build-dist" + path: dist + + - name: Download SLSA provenance attestation uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: + name: "multiple.intoto.jsonl" path: dist - name: Create GitHub release @@ -189,4 +196,4 @@ jobs: files: | dist/powerapi-*.whl dist/powerapi-*.tar.gz - dist/*.intoto.jsonl + dist/multiple.intoto.jsonl