mirror of
https://github.com/edera-dev/sprout.git
synced 2026-11-04 20:42:20 +00:00
The release workflow checked out the ref it was dispatched on, usually main, instead of the release tag. The published binaries and their provenance attestation could come from a different commit than the tag they were attached to. Check out the tag instead.