Bump cosign to v2.2.3

Signed-off-by: Marco Franssen <[email protected]>
philips-labs · Feb 9, 2024 · dac9a32 · dac9a32
1 parent c852cde
commit dac9a32
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/golang.yml b/.github/workflows/golang.yml
@@ -79,7 +79,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.2.3'
 
       - name: Login to container registries
         if: startsWith(github.ref, 'refs/tags/')
@@ -153,7 +153,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.2.3'
 
       - name: Sign provenance
         run: |
@@ -189,7 +189,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/[email protected]
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.2.3'
 
       - name: Generate provenance for ${{ matrix.repo }}
         uses: philips-labs/[email protected]