bump cosign to v1.12.1

Signed-off-by: cpanato <ctadeu@gmail.com>
sigstore · Sep 23, 2022 · 9471095 · 9471095
1 parent f3c664d
commit 9471095
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 12 deletions.
diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
@@ -197,14 +197,18 @@ jobs:
         shell: bash
 
   test_cosign_with_go_install:
-    runs-on: ubuntu-latest
     permissions: {}
-    name: Try to install cosign with go
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [macos-latest, ubuntu-latest, windows-latest]
+        go_version: ['1.18', '1.19']
+    name: Try to install cosign with go ${{ matrix.go_version }}
     steps:
     - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3
     - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3.3.0
       with:
-        go-version: 1.18
+        go-version: ${{ matrix.go_version }}
         check-latest: true
     - name: Install Cosign
       uses: ./

diff --git a/README.md b/README.md
@@ -15,7 +15,7 @@ Add the following entry to your Github workflow YAML file:
 ```yaml
 uses: sigstore/cosign-installer@main
 with:
-  cosign-release: 'v1.11.0' # optional
+  cosign-release: 'v1.12.1' # optional
 ```
 
 Example using a pinned version:
@@ -32,7 +32,7 @@ jobs:
       - name: Install Cosign
         uses: sigstore/cosign-installer@main
         with:
-          cosign-release: 'v1.11.0'
+          cosign-release: 'v1.12.1'
       - name: Check install!
         run: cosign version
 ```

diff --git a/action.yml b/action.yml
@@ -10,7 +10,7 @@ inputs:
   cosign-release:
     description: 'cosign release version to be installed'
     required: false
-    default: 'v1.11.1'
+    default: 'v1.12.1'
   install-dir:
     description: 'Where to install the cosign binary'
     required: false
@@ -66,12 +66,12 @@ runs:
         }
 
         bootstrap_version='v1.11.1'
-        bootstrap_linux_amd64_sha='4d9e4a8e79b714039b272ef89ae29bc45b32e585b6010a5b9048da14d93cfd5f'
-        bootstrap_linux_arm_sha='8568c6bcafe0dc230c75654ac2b5d4379a72738df1377b95cd0d48e3f1d7bc1d'
-        bootstrap_linux_arm64_sha='9fb8b494edb4b95caa9b822d2910460e40b16bc90b9477a2af2bcfba0bb9982f'
-        bootstrap_darwin_amd64_sha='a2b5aa3d82cf845c137d3da29aac33557767575967ec8683d673ef6c0116803d'
-        bootstrap_darwin_arm64_sha='d9ec1d1dd722a5cc62ece8ec0832ada0645f48d3d4b8858874d8cad96a15bf2a'
-        bootstrap_windows_amd64_sha='750e1b9e383d5d1f9782176a63121c4f310ad4cbd2262c8fde6fe4086090c164'
+        bootstrap_linux_amd64_sha='b30fdc7d9aab246bc2f6a760ed8eff063bd37935389302c963c07018e5d48a12'
+        bootstrap_linux_arm_sha='a9897bc2b15915ff3ae6a5121d90a6567d4304e31df7db15451f5b4b6c68a46f'
+        bootstrap_linux_arm64_sha='d9ba8512d8dd6cc05b2c626d2e2ec966dd24c5f8ad3b479ae9ab6066c8d9deb7'
+        bootstrap_darwin_amd64_sha='87a7e93b1539d988fefe0d00fd5a5a0e02ef43f5f977c2a701170c502a17980d'
+        bootstrap_darwin_arm64_sha='41bc69dae9f06f58e8e61446907b7e53a4db41ef341b235172d3745c937f1777'
+        bootstrap_windows_amd64_sha='cc6018202d69e25050c0da58be032debd9fefe1a06cba1883b0ad607c767352d'
         cosign_executable_name=cosign
 
         trap "popd >/dev/null" EXIT