SLSA up to v1.9.0 (latest) breaking GHA pipelines

Team is working on a release; link[0] is the issue to follow. It looks like anyone using SLSA generators on GitHub will need to update, which is a lot of people.

I suppose the tight coupling imposed by the latest wave of dependency security best practices guaranteed this would happen eventually.

[0]: https://github.com/slsa-framework/slsa-github-generator/issu...