diff --git a/.github/actions/bootstrap/action.yml b/.github/actions/bootstrap/action.yml index 7b5d8988..23756ca7 100644 --- a/.github/actions/bootstrap/action.yml +++ b/.github/actions/bootstrap/action.yml @@ -23,7 +23,7 @@ runs: - name: Set up Docker Buildx if: "${{ inputs.goreleaser == 'true' }}" - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # See https://goreleaser.com/blog/supply-chain-security/ - name: installs syft for generating the SBOM with goreleaser