From f5c96713563ad46b9e7540abfd88c32b7cf02453 Mon Sep 17 00:00:00 2001 From: Carlos A Becker Date: Thu, 21 Jul 2022 08:58:31 -0300 Subject: [PATCH 1/2] feat(deps): update cosign to 1.9.0 Signed-off-by: Carlos A Becker --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 98502baef54..7623ac33cca 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ RUN apk add --no-cache bash \ tini # install cosign -COPY --from=gcr.io/projectsigstore/cosign:v1.7.2@sha256:ad2985a87622d5934a4bc06a61faadff772e377937e42519af4f506e1b019d1e /ko-app/cosign /usr/local/bin/cosign +COPY --from=gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84 /ko-app/cosign /usr/local/bin/cosign ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"] CMD [ "-h" ] From d510f9ada04938d0117e44ee8713f6e361523a1a Mon Sep 17 00:00:00 2001 From: Carlos A Becker Date: Fri, 22 Jul 2022 11:17:20 -0300 Subject: [PATCH 2/2] fix: 1.10 Signed-off-by: Carlos A Becker --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 2b928a62968..1e295600019 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.18.4-alpine@sha256:46f1fa18ca1ec228f7ea4978ad717f0a8c5e51436e7b8efaf64011f7729886df +FROM golang:1.18.4-alpine@sha256:c9a90742f5457fae80d8f9f1c9fc6acd6884c749dc6c5b11c22976973564dd4f RUN apk add --no-cache bash \ curl \ @@ -13,7 +13,7 @@ RUN apk add --no-cache bash \ tini # install cosign -COPY --from=gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84 /ko-app/cosign /usr/local/bin/cosign +COPY --from=gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94 /ko-app/cosign /usr/local/bin/cosign ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"] CMD [ "-h" ]