We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1367fc5 commit dad76acCopy full SHA for dad76ac
.github/workflows/release.yaml
@@ -33,7 +33,7 @@ jobs:
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
36
- - uses: anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # v0.20.2
+ - uses: anchore/sbom-action/download-syft@9e07fd7fd4c7754e8b7de48b7823674442d75a35 # v0.20.3
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
39
uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0
0 commit comments