Change witness install to in-toto org

Signed-off-by: John Kjell <john@testifysec.com>
testifysec · Nov 22, 2023 · 9361145 · 9361145
1 parent 6bc5c8b
commit 9361145
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -184,7 +184,7 @@ jobs:
       attestations: "git github environment"
       artifact-download: image.tar
       pre-command: |
-        curl -sSfL https://github.com/testifysec/witness/releases/download/v0.1.14/witness_0.1.14_linux_amd64.tar.gz -o witness.tar.gz && \
+        curl -sSfL https://github.com/in-toto/witness/releases/download/v0.1.14/witness_0.1.14_linux_amd64.tar.gz -o witness.tar.gz && \
         tar -xzvf witness.tar.gz -C /usr/local/bin/ && rm ./witness.tar.gz
       command: |
         witness verify -p policy-signed.json -k swfpublic.pem -f /tmp/image.tar --enable-archivista -l debug