Update provenance action (#2105)

Subserial · web-flow · commit 78d4a6e980c6 · 2025-05-20T16:28:39.000-07:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,11 +4,10 @@ on:
   push:
     tags: ['*']
 
-permissions:
-  contents: write
-
 jobs:
   goreleaser:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     outputs:
       hashes: ${{ steps.hash.outputs.hashes }}
@@ -43,7 +42,7 @@ jobs:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.5.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
     with:
       base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
       upload-assets: true # upload to a new release
