We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e22c567 commit d6a7af2Copy full SHA for d6a7af2
.github/workflows/release.yaml
@@ -32,7 +32,7 @@ jobs:
32
username: ${{ github.actor }}
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
- uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+ uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
36
- uses: anchore/sbom-action/download-syft@fbfd9c6c189226748411491745178e0c2017392d # v0.20.10
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
0 commit comments