diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7dfc12a..baf8874 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -175,7 +175,7 @@ jobs: with: base64-subjects: "${{ needs.collect.outputs.hashes }}" # Upload provenance to a new release - upload-assets: true + upload-assets: false provenance-name: supercan.intoto.jsonl @@ -283,7 +283,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} with: upload_url: ${{ steps.create_release.outputs.upload_url }} - asset_path: ./artifact/supercan-firmware.tar.xz + asset_path: ${{ steps.download.outputs.download-path }}/artifact/supercan-firmware.tar.xz asset_name: supercan-firmware.tar.xz asset_content_type: application/x-xz @@ -293,7 +293,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} with: upload_url: ${{ steps.create_release.outputs.upload_url }} - asset_path: ./artifact/ supercan-win.7z + asset_path: ${{ steps.download.outputs.download-path }}/artifact/ supercan-win.7z asset_name: supercan-win.7z asset_content_type: application/x-7z-compressed @@ -303,7 +303,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} with: upload_url: ${{ steps.create_release.outputs.upload_url }} - asset_path: ./artifact/ supercan_inst.exe + asset_path: ${{ steps.download.outputs.download-path }}/artifact/ supercan_inst.exe asset_name: supercan_inst.exe asset_content_type: application/vnd.microsoft.portable-executable @@ -313,7 +313,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} with: upload_url: ${{ steps.create_release.outputs.upload_url }} - asset_path: ./supercan.intoto.jsonl/supercan.intoto.jsonl + asset_path: ${{ steps.download.outputs.download-path }}/supercan.intoto.jsonl/supercan.intoto.jsonl asset_name: supercan.intoto.jsonl asset_content_type: application/vnd.microsoft.portable-executable