We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent d882953 commit a535559Copy full SHA for a535559
.github/workflows/release.yaml
@@ -32,7 +32,7 @@ jobs:
32
username: ${{ github.actor }}
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
- uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
+ uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
36
- uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
0 commit comments