pin actions/attest to v0.1.0 (#25)

Signed-off-by: Brian DeHamer <bdehamer@github.com>

Author: bdehamer

action.yml

@@ -42,7 +42,7 @@ runs:
   steps:
     - uses: actions/attest-build-provenance/predicate@56a361a16034268025aa760d300531128e298f1c # predicate@0.1.0
       id: generate-build-provenance-predicate
-    - uses: actions/attest@main
+    - uses: actions/attest@14e407ca15f1b08f4869fc058b059f7f1e434df6 # v0.1.0
       id: attest
       with:
         subject-path: ${{ inputs.subject-path }}