We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 373cbf6 commit a8c1de7Copy full SHA for a8c1de7
.github/workflows/release.yaml
@@ -32,7 +32,7 @@ jobs:
32
username: ${{ github.actor }}
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
- uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
+ uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e # v3.8.0
36
- uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
0 commit comments