Only invoke attest-build-provenance once.

vezel-dev · Feb 27, 2025 · 2127ede · 2127ede
1 parent f02d37c
commit 2127ede
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -41,11 +41,9 @@ jobs:
       - name: Attest packages
         uses: actions/[email protected]
         with:
-          subject-path: out/pkg/dotnet/release/*.nupkg
-      - name: Attest extensions
-        uses: actions/[email protected]
-        with:
-          subject-path: out/pkg/vs*/*.vsix
+          subject-path: |
+            out/pkg/dotnet/release/*.nupkg
+            out/pkg/vs*/*.vsix
       - name: Upload artifacts
         if: always()
         uses: actions/[email protected]