fix nits

Signed-off-by: AdamKorcz <adam@adalogics.com>
slsa-framework · May 27, 2023 · bcc5f42 · bcc5f42
1 parent 7c64f60
commit bcc5f42
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/.github/workflows/builder_maven_slsa3.yml b/.github/workflows/builder_maven_slsa3.yml
@@ -12,6 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+permissions: {}
+
 on:
   workflow_call:
     inputs:
@@ -52,8 +54,8 @@ jobs:
     permissions:
       id-token: write # For signing.
       contents: read # For asset uploads.
-      actions: read   # For the entrypoint.
-      packages: write
+      actions: read # For the entrypoint.
+      packages: write # To publish to GitHub packages.
     uses: slsa-framework/slsa-github-generator/.github/workflows/delegator_lowperms-generic_slsa3.yml@main
     with:
       slsa-token: ${{ needs.slsa-setup.outputs.slsa-token }}

diff --git a/internal/builders/maven/action.yml b/internal/builders/maven/action.yml
@@ -61,7 +61,7 @@ runs:
         ARTIFACT_LIST: ${{ fromJson(inputs.slsa-workflow-inputs).artifact-list }}
       run: ./../__TOOL_ACTION_DIR__/collect_release_artifacts.sh
     - name: Upload built artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
       with:
         path: ./release-files-for-slsa/*
     - name: Make outputs