We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 96bead6 commit 0d3af94Copy full SHA for 0d3af94
.github/workflows/release.yaml
@@ -28,7 +28,7 @@ jobs:
28
username: ${{ github.actor }}
29
password: ${{ secrets.GITHUB_TOKEN }}
30
- name: Setup Cosign
31
- uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
+ uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
32
- uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
33
- name: Create release and SBOM
34
if: startsWith(github.ref, 'refs/tags/v')
0 commit comments