Merge pull request kubernetes#17828 from acumino/fix-sbom

Fix Generate SBOM workflow
spowelljr · Dec 18, 2023 · 23df972 · 23df972
2 parents ef74de3 + f5a7790
commit 23df972
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -4,7 +4,7 @@ on:
   release:
     types: [published]
 permissions:
-  contents: read
+  contents: write
 jobs:
   generate_sbom_action:
     runs-on: ubuntu-latest
@@ -13,7 +13,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Install bom
-        uses: kubernetes-sigs/release-actions/setup-bom@main
+        uses: kubernetes-sigs/release-actions/setup-bom@ef6d340ddd115f41dc26c18893b41d9c79cdc7d2 # main
       - name: Generage SBOM
         run: |
           bom generate -o minikube_${{github.ref_name}}_sbom.spdx \