build-packages: Upload SLSA attestations to the right directory

diff --git a/.github/workflows/build-packages.yml b/.github/workflows/build-packages.yml
index 9fd3a1c751fad6a6f7481777f7f15a1104b4c8d9..1bf55f30c8acc05b1a0a6275dc2d94c9d105f509 100644 (file)
--- a/.github/workflows/build-packages.yml
+++ b/.github/workflows/build-packages.yml
@@ -247,4 +247,6 @@ jobs:
           echo "$SSHKEY" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
           echo "$HOSTKEY" > ~/.ssh/known_hosts
-          rsync -4rlptD ${{steps.download-src-provenance.outputs.download-path}}/*.jsonl ${{steps.download-provenance.outputs.download-path}}/*.jsonl "${RSYNCTARGET}/${PRODUCT}/${VERSION}/"
+          mkdir -m 700 -p "slsa/${PRODUCT}/${VERSION}/"
+          mv ${{steps.download-src-provenance.outputs.download-path}}/*.jsonl ${{steps.download-provenance.outputs.download-path}}/*.jsonl "slsa/${PRODUCT}/${VERSION}"
+          rsync -4rlptD slsa/* "$RSYNCTARGET"