fix: don't pin to SHA for slsa

Signed-off-by: Michael Fornaro <[email protected]>
xentra-ai · Nov 15, 2023 · 57f137b · 57f137b
1 parent 6c99e3d
commit 57f137b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/go-ossf-slsa3-publish.yml b/.github/workflows/go-ossf-slsa3-publish.yml
@@ -60,7 +60,7 @@ jobs:
         arch:
           - amd64
           - arm64
-    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830 # v1.9.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.9.0 # v1.9.0
     with:
       go-version: 1.21
       config-file: .slsa-goreleaser/${{matrix.os}}-${{matrix.arch}}.yml