Merge pull request #164 from kubecost/slsa-github-generator

Use internal fork of slsa-github-generator action

Author: cpetersen5

.github/workflows/release.yaml

@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 
 ### This workflow uses the SLSA container provenance generator workflow
-### (see https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/container/README.md)
+### (see https://github.com/kubecost/slsa-github-generator/blob/main/internal/builders/container/README.md)
 ### to generate a SLSA provenance type predicate for a container image built by ko and attesting to it and others
 ### using keyless signing.
 name: release
@@ -106,7 +106,7 @@ jobs:
       actions: read
       packages: write
     needs: build
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0
+    uses: kubecost/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@main
     # Can't use env global vars in a reusable workflow. See https://github.com/actions/runner/issues/2372
     with:
       digest: "${{ needs.build.outputs.digest }}"