Bump cosign to v2.4.0

philips-labs · Aug 12, 2024 · 62faa49 · 62faa49
1 parent 201de6f
commit 62faa49
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -84,7 +84,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.4.0'
 
       - name: Install Syft
         uses: anchore/sbom-action/[email protected]
@@ -147,7 +147,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.4.0'
 
       - name: Install Syft
         uses: anchore/sbom-action/[email protected]
@@ -199,7 +199,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.4.0'
 
       - name: Sign provenance
         run: |
@@ -231,7 +231,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.4.0'
 
       - name: Generate provenance for ${REPO}
         uses: philips-labs/[email protected]