From 9614fae9e5c5eddabb09f90a270fcb487c9f7149 Mon Sep 17 00:00:00 2001 From: Carlos Tadeu Panato Junior Date: Mon, 11 Dec 2023 15:12:06 +0100 Subject: [PATCH] update action to use latest cosign v2.2.2 (#153) Signed-off-by: cpanato --- README.md | 14 +++++++------- action.yml | 16 ++++++++-------- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/README.md b/README.md index 3ee0b35..2ba2382 100644 --- a/README.md +++ b/README.md @@ -13,9 +13,9 @@ This action currently supports GitHub-provided Linux, macOS and Windows runners Add the following entry to your Github workflow YAML file: ```yaml -uses: sigstore/cosign-installer@v3.1.1 +uses: sigstore/cosign-installer@v3.3.0 with: - cosign-release: 'v2.1.1' # optional + cosign-release: 'v2.2.2' # optional ``` Example using a pinned version: @@ -30,9 +30,9 @@ jobs: name: Install Cosign steps: - name: Install Cosign - uses: sigstore/cosign-installer@v3.1.1 + uses: sigstore/cosign-installer@v3.3.0 with: - cosign-release: 'v2.2.1' + cosign-release: 'v2.2.2' - name: Check install! run: cosign version ``` @@ -49,7 +49,7 @@ jobs: name: Install Cosign steps: - name: Install Cosign - uses: sigstore/cosign-installer@v3.1.1 + uses: sigstore/cosign-installer@v3.3.0 - name: Check install! run: cosign version ``` @@ -73,7 +73,7 @@ jobs: go-version: '1.21' check-latest: true - name: Install Cosign - uses: sigstore/cosign-installer@v3.1.1 + uses: sigstore/cosign-installer@v3.3.0 with: cosign-release: main - name: Check install! @@ -105,7 +105,7 @@ jobs: fetch-depth: 1 - name: Install Cosign - uses: sigstore/cosign-installer@v3.1.1 + uses: sigstore/cosign-installer@v3.3.0 - name: Set up QEMU uses: docker/setup-qemu-action@v2.1.0 diff --git a/action.yml b/action.yml index 96b4afb..f293827 100644 --- a/action.yml +++ b/action.yml @@ -10,7 +10,7 @@ inputs: cosign-release: description: 'cosign release version to be installed' required: false - default: 'v2.2.1' + default: 'v2.2.2' install-dir: description: 'Where to install the cosign binary' required: false @@ -65,13 +65,13 @@ runs: esac } - bootstrap_version='v2.2.1' - bootstrap_linux_amd64_sha='f6c24066e7f75221c4b7f309b8322d7d42a1d96470e0440e6e357fe43661d81f' - bootstrap_linux_arm_sha='8ceaffbde4970338b51b77a4a6321348e47c7d27bd19f7f502768f8208f5b8e2' - bootstrap_linux_arm64_sha='8c04e9877fb6e3a96a3916d4dfa855a493c418ace5d5ec4dba6a249490f888d1' - bootstrap_darwin_amd64_sha='f1a948cded75e0858e739d90604e2a7e4d2f3fda15bfef12c0c03726567443bc' - bootstrap_darwin_arm64_sha='a9ca33020c41ad245ec595c7097c9280e29e5afdd95ab19359a65d6e1a756777' - bootstrap_windows_amd64_sha='88eea88aff14bc42cc00b9212b4cee7a20779836731bf83768cc1d9006cf386d' + bootstrap_version='v2.2.2' + bootstrap_linux_amd64_sha='121ba0031827c090364894688049651d3a0a82a87235c469322a202aa2944211' + bootstrap_linux_arm_sha='46e1a98be7f1cbf8fe89ba3523a880444c2ba3cb0eea74c6ed1514b6db2555f9' + bootstrap_linux_arm64_sha='82eb62be7e1b7924db193d4a4a496eca94510df2961d88406ba07fb3435f6e8f' + bootstrap_darwin_amd64_sha='e3d43db982b642be15a622e3791480620f5e7f2e902ab0c9e2db21daaa36259e' + bootstrap_darwin_arm64_sha='7874404ce8a9b29251ff485c6ecb46ecfebd6b1f5fa3cb6cd0b9bf2c75bab2d5' + bootstrap_windows_amd64_sha='c33f389596f7763ef19674e6d5792c45d38d7b48c832955aa94eb17f12f2931e' cosign_executable_name=cosign trap "popd >/dev/null" EXIT