From 8e086460e6a47e4d116e261c77232fa21d371175 Mon Sep 17 00:00:00 2001 From: Sascha Grunert Date: Fri, 17 Jun 2022 11:55:43 +0200 Subject: [PATCH] Pin cosign-installer to `v2` We now have tags available in the cosign-installer, which allows us to pin the latest release via `v2`. Signed-off-by: Sascha Grunert --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 84cd45c9eb..3b8812a82f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,7 +10,7 @@ jobs: GO111MODULE: on ACTIONS_ALLOW_UNSECURE_COMMANDS: true steps: - - name: Checkout Source + - name: Checkout Source uses: actions/checkout@v3 - name: Unshallow run: git fetch --prune --unshallow @@ -19,7 +19,7 @@ jobs: with: go-version: 1.18 - name: Install Cosign - uses: sigstore/cosign-installer@main + uses: sigstore/cosign-installer@v2 with: cosign-release: 'v1.6.0' - name: Store Cosign private key in a file