From 6b5c2df85d394ccfd36816276050c629ab09f2da Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 14:12:14 +0000 Subject: [PATCH] chore(deps): bump attested-delivery/.github/.github/workflows/sign-and-attest.yml Bumps [attested-delivery/.github/.github/workflows/sign-and-attest.yml](https://github.com/attested-delivery/.github) from f0c5cba531533a956ce0e4dfd744d398b1b13494 to 78f1933ef020e3d94af848a191297d26e8dc8b4c. - [Release notes](https://github.com/attested-delivery/.github/releases) - [Commits](https://github.com/attested-delivery/.github/compare/f0c5cba531533a956ce0e4dfd744d398b1b13494...78f1933ef020e3d94af848a191297d26e8dc8b4c) --- updated-dependencies: - dependency-name: attested-delivery/.github/.github/workflows/sign-and-attest.yml dependency-version: 78f1933ef020e3d94af848a191297d26e8dc8b4c dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8134560..68f6981 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -534,7 +534,7 @@ jobs: # attested-delivery/.github main @ f0c5cba (2026-07-13) — includes # attested-delivery/.github#32's fix for the SBOM step's # upload-release-assets 403 on tagged releases - uses: attested-delivery/.github/.github/workflows/sign-and-attest.yml@f0c5cba531533a956ce0e4dfd744d398b1b13494 + uses: attested-delivery/.github/.github/workflows/sign-and-attest.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c with: image-name: ghcr.io/${{ github.repository }} image-digest: ${{ needs.docker.outputs.image-digest }}