We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 22c59f5 commit 36c61f1Copy full SHA for 36c61f1
.github/workflows/release.yaml
@@ -33,7 +33,7 @@ jobs:
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
36
- - uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # v0.20.4
+ - uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
39
uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0
0 commit comments