We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 982d103 commit f88df5cCopy full SHA for f88df5c
.github/workflows/release.yaml
@@ -29,7 +29,7 @@ jobs:
29
password: ${{ secrets.GITHUB_TOKEN }}
30
- name: Setup Cosign
31
uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
32
- - uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
+ - uses: anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # v0.20.2
33
- name: Create release and SBOM
34
if: startsWith(github.ref, 'refs/tags/v')
35
uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
0 commit comments