From 9361145f2b0b5e883bccc4b2864bb5f1bc912309 Mon Sep 17 00:00:00 2001 From: John Kjell Date: Wed, 22 Nov 2023 09:15:01 -0600 Subject: [PATCH] Change witness install to in-toto org Signed-off-by: John Kjell --- .github/workflows/pipeline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index 765995b..1e4afdf 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -184,7 +184,7 @@ jobs: attestations: "git github environment" artifact-download: image.tar pre-command: | - curl -sSfL https://github.com/testifysec/witness/releases/download/v0.1.14/witness_0.1.14_linux_amd64.tar.gz -o witness.tar.gz && \ + curl -sSfL https://github.com/in-toto/witness/releases/download/v0.1.14/witness_0.1.14_linux_amd64.tar.gz -o witness.tar.gz && \ tar -xzvf witness.tar.gz -C /usr/local/bin/ && rm ./witness.tar.gz command: | witness verify -p policy-signed.json -k swfpublic.pem -f /tmp/image.tar --enable-archivista -l debug