Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🌱 Bump sigstore/cosign-installer from 1.2.1 to 2.4.1 #2021

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 4, 2022

Bumps sigstore/cosign-installer from 1.2.1 to 2.4.1.

Release notes

Sourced from sigstore/cosign-installer's releases.

v2.4.1

If you use a custom installation directory and that need sudo permissions you will need to set the use-sudo to true as well

What's Changed

New Contributors

Full Changelog: sigstore/cosign-installer@v2...v2.4.1

v2.4.0

What's Changed

New Contributors

Full Changelog: sigstore/cosign-installer@v2.3.0...v2.4.0

v2.3.0

What's Changed

Full Changelog: sigstore/cosign-installer@v2.2.1...v2.3.0

v2.2.1

What's Changed

Full Changelog: sigstore/cosign-installer@v2.2.0...v2.2.1

v2.2.0

What's Changed

Full Changelog: sigstore/cosign-installer@v2.1.0...v2.2.0

... (truncated)

Commits
  • 48866aa add use-sudo optional parameter defaulting to false. Fixes: #85 (#84)
  • 441a29e sudo mv the cosign binary to the install-dir (#83)
  • 6679bb8 update readme (#82)
  • 7e0881f default cosign to 1.9.0 release (#80)
  • 3d3d32a keep .exe extension in cosign for windows (#79)
  • 536b37e update cosign to use 1.8.0 as default (#76)
  • 61420c1 Bump actions/checkout from 3.0.1 to 3.0.2 (#75)
  • f997690 Bump actions/checkout from 3.0.0 to 3.0.1 (#72)
  • bb61838 update action to use cosign v1.7.2 by default (#71)
  • 2f775b4 Bump actions/setup-go from 2.2.0 to 3 (#70)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 4, 2022
@dependabot dependabot bot temporarily deployed to integration-test July 4, 2022 08:16 Inactive
@codecov
Copy link

codecov bot commented Jul 4, 2022

Codecov Report

Merging #2021 (b188dfc) into main (b945eb3) will increase coverage by 2.49%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #2021      +/-   ##
==========================================
+ Coverage   42.13%   44.62%   +2.49%     
==========================================
  Files          92       92              
  Lines        7569     7569              
==========================================
+ Hits         3189     3378     +189     
+ Misses       4132     3936     -196     
- Partials      248      255       +7     

@github-actions
Copy link

github-actions bot commented Jul 4, 2022

Integration tests success for
[3a5f423]
(https://github.com/ossf/scorecard/actions/runs/2608657876)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 3a5f423 to ce8d865 Compare July 5, 2022 14:15
@dependabot dependabot bot temporarily deployed to integration-test July 6, 2022 13:29 Inactive
@github-actions
Copy link

github-actions bot commented Jul 6, 2022

Integration tests success for
[ce8d865]
(https://github.com/ossf/scorecard/actions/runs/2616763125)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from ce8d865 to a1a1867 Compare July 6, 2022 18:23
@dependabot dependabot bot temporarily deployed to integration-test July 6, 2022 18:33 Inactive
@github-actions
Copy link

github-actions bot commented Jul 6, 2022

Integration tests success for
[a1a1867]
(https://github.com/ossf/scorecard/actions/runs/2624800581)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from a1a1867 to f76daef Compare July 6, 2022 20:54
@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from f76daef to aceacea Compare July 8, 2022 14:32
@dependabot dependabot bot temporarily deployed to integration-test July 8, 2022 14:46 Inactive
@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from aceacea to 5e7472c Compare July 8, 2022 15:49
@github-actions
Copy link

github-actions bot commented Jul 8, 2022

Integration tests success for
[aceacea]
(https://github.com/ossf/scorecard/actions/runs/2636746128)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 5e7472c to 1e7c7bc Compare July 11, 2022 02:44
@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 1e7c7bc to d5b26c2 Compare July 11, 2022 20:03
@dependabot dependabot bot temporarily deployed to integration-test July 11, 2022 20:11 Inactive
@github-actions
Copy link

Integration tests success for
[d5b26c2]
(https://github.com/ossf/scorecard/actions/runs/2652113791)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from d5b26c2 to c080873 Compare July 11, 2022 22:00
@dependabot dependabot bot temporarily deployed to integration-test July 16, 2022 18:41 Inactive
@github-actions
Copy link

Integration tests success for
[87cf2fa]
(https://github.com/ossf/scorecard/actions/runs/2682675910)

@github-actions
Copy link

Integration tests success for
[1e96c74]
(https://github.com/ossf/scorecard/actions/runs/2682823900)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 1e96c74 to 75a8526 Compare July 16, 2022 20:34
@dependabot dependabot bot temporarily deployed to integration-test July 16, 2022 20:35 Inactive
@github-actions
Copy link

Integration tests success for
[75a8526]
(https://github.com/ossf/scorecard/actions/runs/2683121447)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 75a8526 to 2eddc3b Compare July 18, 2022 18:43
@dependabot dependabot bot temporarily deployed to integration-test July 18, 2022 18:46 Inactive
@github-actions
Copy link

Integration tests success for
[2eddc3b]
(https://github.com/ossf/scorecard/actions/runs/2692731091)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 2eddc3b to 57fe784 Compare July 21, 2022 14:31
@dependabot dependabot bot temporarily deployed to integration-test July 21, 2022 14:34 Inactive
@github-actions
Copy link

Integration tests success for
[57fe784]
(https://github.com/ossf/scorecard/actions/runs/2712528036)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 57fe784 to 64d177d Compare July 21, 2022 15:45
@dependabot dependabot bot temporarily deployed to integration-test July 21, 2022 15:50 Inactive
@github-actions
Copy link

Integration tests success for
[64d177d]
(https://github.com/ossf/scorecard/actions/runs/2712998238)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from 64d177d to ebe0f27 Compare July 22, 2022 13:40
@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from ebe0f27 to bf642a3 Compare July 23, 2022 03:27
@dependabot dependabot bot temporarily deployed to integration-test July 23, 2022 03:29 Inactive
@github-actions
Copy link

Integration tests success for
[bf642a3]
(https://github.com/ossf/scorecard/actions/runs/2722303961)

@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from bf642a3 to c5743e7 Compare July 23, 2022 04:14
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 1.2.1 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@f700e6f...48866aa)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch from c5743e7 to b188dfc Compare July 23, 2022 05:24
@dependabot dependabot bot temporarily deployed to integration-test July 23, 2022 05:26 Inactive
@github-actions
Copy link

Integration tests success for
[b188dfc]
(https://github.com/ossf/scorecard/actions/runs/2722590212)

@naveensrinivasan naveensrinivasan merged commit d77f59f into main Jul 23, 2022
@naveensrinivasan naveensrinivasan deleted the dependabot/github_actions/sigstore/cosign-installer-2.4.1 branch July 23, 2022 10:42
singhsaurabh pushed a commit to singhsaurabh/scorecard that referenced this pull request Jul 25, 2022
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 1.2.1 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@f700e6f...48866aa)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant