Merge pull request #130 from marcransome/slsa-provenance-release-intoto

Download in-toto attestations in release job
marcransome · Mar 24, 2024 · 1dd0dc1 · 1dd0dc1
2 parents f042808 + bef053e
commit 1dd0dc1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -123,6 +123,10 @@ jobs:
         uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
         with:
           name: ${{ needs.build.outputs.checksum-darwin-arm64 }}
+      - name: Download in-toto attestations file
+        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
+        with:
+          name: flog.multiple.intoto.jsonl
       - name: Upload release assets
         uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2.0.4
         with: