Suggested guidance for replacing `detect-workflow-js`

[ericcornelissen]

In the spirit of

slsa-github-generator/README.md

Line 12 in bb91a05

> We are working on guidance and simpler tooling to replace it.

I found¹ that using the job context is an alternative to using slsa-framework/slsa-github-generator/.github/actions/detect-workflow-js. In particular, the outputs of that action map to this context as follows

Output name	Replacement
repository	${{ job.workflow_repository }}
ref	${{ job.workflow_sha }}
workflow	${{ job.workflow_file_path }}

Footnotes

1. see https://github.com/sigstore/rekor-monitor/pull/1021 ↩