From 62faa498372bcff98d3658b52ad721619f0b7b19 Mon Sep 17 00:00:00 2001 From: Marco Franssen Date: Mon, 12 Aug 2024 13:53:37 +0200 Subject: [PATCH] Bump cosign to v2.4.0 --- .github/workflows/ci.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index d073e3a..0aa99f3 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -84,7 +84,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v3.6.0 with: - cosign-release: 'v2.2.1' + cosign-release: 'v2.4.0' - name: Install Syft uses: anchore/sbom-action/download-syft@v0.16.0 @@ -147,7 +147,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v3.6.0 with: - cosign-release: 'v2.2.1' + cosign-release: 'v2.4.0' - name: Install Syft uses: anchore/sbom-action/download-syft@v0.16.0 @@ -199,7 +199,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v3.6.0 with: - cosign-release: 'v2.2.1' + cosign-release: 'v2.4.0' - name: Sign provenance run: | @@ -231,7 +231,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v3.6.0 with: - cosign-release: 'v2.2.1' + cosign-release: 'v2.4.0' - name: Generate provenance for ${REPO} uses: philips-labs/slsa-provenance-action@v0.8.0