Merge pull request #599 from KiraCore/bugfix/gf_cosign_installer_commit

Bugfix/gf cosign installer commit
KiraCore · Nov 17, 2023 · 776b944 · 776b944
2 parents 7027803 + 93ebfe0
commit 776b944
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -118,11 +118,13 @@ jobs:
       pull-requests: write
     steps:
           # Install the cosign tool
-          # ref.: https://github.com/sigstore/cosign-installer, v2.2.0
+          # ref.: https://github.com/sigstore/cosign-installer, v3.2.0
           - name: Install cosign
-            uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
+            uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8
             with:
-              cosign-release: 'v1.7.2'
+              cosign-release: 'v2.0.0'
+          - name: Confirm installation!
+            run: cosign version
           - name: Download artifacts
             uses: actions/[email protected]
             with:
@@ -265,4 +267,4 @@ jobs:
             env:
               MERGE_LABELS: "automerge"
               GITHUB_TOKEN: "${{ secrets.REPO_ACCESS }}"
-              LOG: "TRACE"
+              LOG: "TRACE"