diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index 771d68e..e993fc6 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -55,7 +55,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - name: Install cosign if: github.ref == 'refs/heads/main' - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Sign the Docker image if: github.ref == 'refs/heads/main' working-directory: ${{ env.IMAGE }} diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index e1b5866..72a574d 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -49,7 +49,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - name: Install cosign - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Sign the Docker image working-directory: ${{ env.IMAGE }} env: diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml index cad597e..b89a40f 100644 --- a/.github/workflows/dockerhub.yml +++ b/.github/workflows/dockerhub.yml @@ -29,7 +29,7 @@ jobs: shell: bash run: docker buildx imagetools inspect "${GITHUB_REPOSITORY_OWNER}/${IMAGE}:${{ matrix.tag }}" --format "{{ json (index .SBOM \"${{ matrix.platform }}\").SPDX }}" - name: Install cosign - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Verify the ${{ matrix.tag }} image signature shell: bash run: |