diff --git a/.github/workflows/attest-and-deploy.yml b/.github/workflows/attest-and-deploy.yml index 499dbd7..e0bfc3b 100644 --- a/.github/workflows/attest-and-deploy.yml +++ b/.github/workflows/attest-and-deploy.yml @@ -54,7 +54,7 @@ jobs: # subject-path: "dist.tar.gz" # Complete an attestation of the SBOM and the build - - uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 + - uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e with: subject-path: 'dist.tar.gz' sbom-path: 'sbom.spdx.json'