in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
https://witness.dev
Apache License 2.0
416 stars 60 forks source link

fix: update github actions to use new fulcio url #274

Closed mikhailswift closed 1 year ago

mikhailswift commented 1 year ago

Updates to a newer version of the witness-run-action with the updated fulcio url as well as updates our tests to use the new fulcio url.