From f85b7665dccb18d05e207fe525529610b1ce687e Mon Sep 17 00:00:00 2001 From: mrlutik Date: Fri, 17 Nov 2023 07:45:22 +0100 Subject: [PATCH 1/2] Update cosign-installer to latest release --- .github/workflows/main.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index a1336672..0f577c64 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -120,9 +120,11 @@ jobs: # Install the cosign tool # ref.: https://github.com/sigstore/cosign-installer, v2.2.0 - name: Install cosign - uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605 + uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 with: - cosign-release: 'v1.7.2' + cosign-release: 'v2.0.0' + - name: Confirm installation! + uses: cosign version - name: Download artifacts uses: actions/download-artifact@v3.0.0 with: From 93ebfe0dc727bec857449090ffb0b6285a518812 Mon Sep 17 00:00:00 2001 From: Eugene <70693118+MrLutik@users.noreply.github.com> Date: Fri, 17 Nov 2023 07:54:16 +0100 Subject: [PATCH 2/2] Update main.yml --- .github/workflows/main.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 0f577c64..ff73a8c5 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -118,13 +118,13 @@ jobs: pull-requests: write steps: # Install the cosign tool - # ref.: https://github.com/sigstore/cosign-installer, v2.2.0 + # ref.: https://github.com/sigstore/cosign-installer, v3.2.0 - name: Install cosign uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 with: cosign-release: 'v2.0.0' - name: Confirm installation! - uses: cosign version + run: cosign version - name: Download artifacts uses: actions/download-artifact@v3.0.0 with: @@ -267,4 +267,4 @@ jobs: env: MERGE_LABELS: "automerge" GITHUB_TOKEN: "${{ secrets.REPO_ACCESS }}" - LOG: "TRACE" \ No newline at end of file + LOG: "TRACE"