From 8caa7bfe1ff369e7c3e81592038b99f70a77ddda Mon Sep 17 00:00:00 2001
From: Joshua Gilman <joshuagilman@gmail.com>
Date: Fri, 23 Jan 2026 21:46:15 -0800
Subject: [PATCH] fix(policy): use branch name without refs/heads prefix

The slsa.WithWorkflowBranches function automatically adds the
refs/heads/ prefix, so the policy should specify just "master"
not "refs/heads/master".

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 .github/policies/src-image.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/policies/src-image.yaml b/.github/policies/src-image.yaml
index e053515..9007b6f 100644
--- a/.github/policies/src-image.yaml
+++ b/.github/policies/src-image.yaml
@@ -12,4 +12,4 @@ signature:
 provenance:
   slsa:
     repository: meigma/blob-cli
-    branch: refs/heads/master
+    branch: master