Use newer version of the generate attestation action - no more early access (#30)

Author: jhrozek

.github/workflows/build-binary-signed-ghat-malicious.yml

@@ -28,7 +28,7 @@ jobs:
           go build -v -o demo-repo-go-binary ./...
 
       - name: Sign artifact
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 

.github/workflows/build-binary-signed-ghat.yml

@@ -24,7 +24,7 @@ jobs:
           go build -v -o demo-repo-go-binary ./...
 
       - name: Sign artifact
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 

.github/workflows/build-binary-unsigned.yml

@@ -24,7 +24,7 @@ jobs:
           go build -v -o demo-repo-go-binary ./...
 
 #      - name: Sign artifact
-#        uses: github-early-access/generate-build-provenance@main
+#        uses: actions/attest-build-provenance@v1.0.0
 #        with:
 #          subject-path: '${{ github.workspace }}/demo-repo-go-binary'
 

.github/workflows/build-image-signed-ghat-malicious.yml

@@ -34,7 +34,7 @@ jobs:
           context: .
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}

.github/workflows/build-image-signed-ghat-static-copied.yml

@@ -31,7 +31,7 @@ jobs:
           file : Dockerfile.static
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}

.github/workflows/build-image-signed-ghat-static.yml

@@ -31,7 +31,7 @@ jobs:
           file : Dockerfile.static
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}

.github/workflows/build-image-signed-ghat.yml

@@ -30,7 +30,7 @@ jobs:
           context: .
 
       - name: Attest image
-        uses: github-early-access/generate-build-provenance@main
+        uses: actions/attest-build-provenance@v1.0.0
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push-step.outputs.digest }}