diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index 88a99df..e2a7dd3 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -55,7 +55,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - name: Install cosign if: github.ref == 'refs/heads/main' - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 - name: Sign the Docker image if: github.ref == 'refs/heads/main' working-directory: ${{ env.IMAGE }} diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index 7121302..0f15feb 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -50,7 +50,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - name: Install cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 - name: Sign the Docker image working-directory: ${{ env.REPOSITORY }} env: diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml index 6124d39..3bc78dc 100644 --- a/.github/workflows/dockerhub.yml +++ b/.github/workflows/dockerhub.yml @@ -29,7 +29,7 @@ jobs: shell: bash run: docker buildx imagetools inspect "${GITHUB_REPOSITORY_OWNER}/${REPOSITORY}:${{ matrix.tag }}" --format "{{ json (index .SBOM \"${{ matrix.platform }}\").SPDX }}" - name: Install cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 - name: Verify the ${{ matrix.tag }} image signature shell: bash run: |