diff --git a/.github/workflows/builder_node_slsa3.yml b/.github/workflows/builder_node_slsa3.yml index ebc8f03d93..171ddfc0a7 100644 --- a/.github/workflows/builder_node_slsa3.yml +++ b/.github/workflows/builder_node_slsa3.yml @@ -43,6 +43,7 @@ on: required: false # Note: set to the same value as actions/node-setup https://github.com/actions/setup-node/blob/main/action.yml#L19. default: ${{ github.token }} + # TODO(https://github.com/slsa-framework/slsa-github-generator/issues/890): support outputing the final tarball name. inputs: node-version: description: > @@ -127,8 +128,6 @@ on: type: boolean default: false - # TODO(https://github.com/slsa-framework/slsa-github-generator/issues/890): support outputing the final tarball name. - jobs: privacy-check: runs-on: ubuntu-latest @@ -249,7 +248,7 @@ jobs: - name: Create tarball id: tarball - env: + env: UNTRUSTED_DIR: ${{ inputs.directory }}" run: | set -euo pipefail