build: updating provenance generation for manual-publish workflows

.github/workflows/manual-publish.yml

@@ -50,6 +50,4 @@ jobs:
  uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.7.0
  with:
  base64-subjects: "${{ needs.build-publish.outputs.package-hashes }}"
- upload-assets: true
- upload-tag-name: TBD
-
+ upload-assets: ${{ !inputs.dry_run }}

PROVENANCE.md

@@ -17,10 +17,8 @@ $ curl --location -O \
 # Run slsa-verifier to verify provenance against package artifacts 
 $ slsa-verifier verify-artifact \
 --provenance-path multiple-provenance.intoto.jsonl \
---source-uri github.com/launchdarkly/launchdarkly-server-sdk \
+--source-uri github.com/launchdarkly/python-server-sdk \
 launchdarkly_server_sdk-VERSION-py3-none-any.whl
-
-TBD OUTPUT
 ```
 
 Alternatively, to verify the provenance manually, the SLSA framework specifies [recommendations for verifying build artifacts](https://slsa.dev/spec/v1.0/verifying-artifacts) in their documentation.