Merge pull request #28 from intigriti/hazcod-patch-2

fix: slsa
hazcod · Sep 9, 2022 · b5896f9 · b5896f9
2 parents 4c5b945 + a553092
commit b5896f9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -63,11 +63,14 @@ jobs:
     -
       name: Generate dist hashes
       id: hash
+      if: steps.semrel.outputs.version != ''
       run: |
+        echo "Hashes $(ls dist/* | xargs shasum -a256 | base64 -w0)"
         echo "::set-output name=hashes::$(ls dist/* | xargs shasum -a256 | base64 -w0)"
   
   provenance:
     needs: [goreleaser]
+    if: needs.goreleaser.outputs.hashes != ''
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.0
     with:
       base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"