fix: nits in Gradle builder (#2188)

Fixes 1. bcc5f42#r1207013096 2. #2181 (comment) 3. #2181 (comment) Signed-off-by: AdamKorcz <adam@adalogics.com>
slsa-framework · May 30, 2023 · 03ab976 · 03ab976
1 parent 2be8bbe
commit 03ab976
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/builder_gradle_slsa3.yml b/.github/workflows/builder_gradle_slsa3.yml
@@ -12,6 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+permissions: {}
+
 on:
   workflow_call:
     inputs:
@@ -53,7 +55,7 @@ jobs:
       id-token: write # For signing.
       contents: read # For asset uploads.
       actions: read   # For the entrypoint.
-      packages: write
+      packages: write # To publish to GitHub packages.
     uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@main
     with:
       slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }}

diff --git a/internal/builders/gradle/action.yml b/internal/builders/gradle/action.yml
@@ -62,7 +62,7 @@ runs:
         ARTIFACT_LIST: ${{ fromJson(inputs.slsa-workflow-inputs).artifact-list }}
       run: ./../__TOOL_ACTION_DIR__/collect_release_artifacts.sh
     - name: Upload built artifacts from gradlew build
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
       with:
         path: ./release-files-for-slsa/*
     - name: Make outputs