Skip to content

Commit 937570b

Browse files
workflows: pin cosign-installer to v1 (#5587)
We now have tags available in the cosign-installer, which allows us to pin the latest release via `v1`. Signed-off-by: Sascha Grunert <[email protected]>
1 parent 1ee8f17 commit 937570b

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

.github/workflows/call-build-images.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -383,7 +383,7 @@ jobs:
383383
environment: ${{ inputs.environment }}
384384
steps:
385385
- name: Install cosign
386-
uses: sigstore/cosign-installer@main
386+
uses: sigstore/cosign-installer@v1
387387

388388
- name: Cosign keyless signing using Rektor public transparency log
389389
# This step uses the identity token to provision an ephemeral certificate

.github/workflows/call-test-images.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
runs-on: [ ubuntu-latest ]
4343
steps:
4444
- name: Install cosign
45-
uses: sigstore/cosign-installer@main
45+
uses: sigstore/cosign-installer@v1
4646

4747
- name: Log in to the Container registry
4848
uses: docker/login-action@v2

.github/workflows/staging-release.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -235,7 +235,7 @@ jobs:
235235
GHCR_RELEASE_IMAGE_NAME: ghcr.io/${{ github.event.inputs.github-image || github.repository }}
236236
steps:
237237
- name: Install cosign
238-
uses: sigstore/cosign-installer@main
238+
uses: sigstore/cosign-installer@v1
239239

240240
- name: Login to Docker Hub
241241
uses: docker/login-action@v2

0 commit comments

Comments
 (0)