feat(ci): specify worker repo in externalParameters.resolvedDependencies

Author: wilsonianb

.github/workflows/deploy-worker.yml

@@ -148,7 +148,8 @@ jobs:
         id: update-predicate
         run: |
           uri="git+https://github.com/${{ github.event.inputs.repo }}@refs/heads/${{ github.event.inputs.branch }}"
-          predicate=$(echo '${{ steps.generate-build-provenance-predicate.outputs.predicate }}' | jq -c ".buildDefinition.resolvedDependencies = [{\"uri\": \"$uri\", \"digest\": {\"gitCommit\": \"${{ github.event.inputs.commit }}\"}}]")
+          resolved_dependencies=$(jq -n --arg uri "$uri" --arg commit "${{ github.event.inputs.commit }}" '[{"uri": $uri, "digest": {"gitCommit": $commit}}]')
+          predicate=$(echo '${{ steps.generate-build-provenance-predicate.outputs.predicate }}' | jq -c '.buildDefinition.externalParameters.resolvedDependencies = $resolved_dependencies' --argjson resolved_dependencies "$resolved_dependencies")
           echo "predicate=$predicate" >> $GITHUB_OUTPUT
 
       - uses: actions/attest@2da0b136720d14f01f4dbeeafd1d5a4d76cbe21d # v1.4.0