diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml index b1840c22eda..7c2a9f08c6d 100644 --- a/.github/workflows/deployment.yml +++ b/.github/workflows/deployment.yml @@ -315,9 +315,10 @@ jobs: rpmsign --addsign dist/*.rpm - name: Attest release artifacts if: inputs.environment == 'production' - uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 + uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0 with: subject-path: "dist/gh_*" + create-storage-record: false # (default: true) - name: Run createrepo env: GPG_SIGN: ${{ inputs.environment == 'production' }}