3 ms·
SLSA up to v1.9.0 (latest) breaking GHA pipelines
- sgammon 3y agoTeam is working on a release; link[0] is the issue to follow. It looks like anyone using SLSA generators on GitHub will need to update, which is a lot of people. I suppose the tight coupling imposed by the latest wave of dependency security best practices guaranteed this would happen eventually. [0]: https://github.com/slsa-framework/slsa-github-generator/issues/3350 https://github.com/slsa-framework/slsa-github-generator/issu...