From 516cae16672bfb6d527648ce309d1dfe772ae141 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 11 Sep 2022 23:39:12 -0400 Subject: [PATCH] Bump sigstore/cosign-installer from 2.5.1 to 2.6.0 (#816) --- .github/workflows/image.yaml | 2 +- .github/workflows/kind-e2e.yaml | 2 +- .github/workflows/sbom.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml index d7fca63130..bccc1e18e4 100644 --- a/.github/workflows/image.yaml +++ b/.github/workflows/image.yaml @@ -19,7 +19,7 @@ jobs: with: go-version: 1.18 check-latest: true - - uses: sigstore/cosign-installer@v2.5.1 + - uses: sigstore/cosign-installer@v2.6.0 # Build ko from HEAD, build and push an image tagged with the commit SHA, # then keylessly sign it with cosign. diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml index 13abd7ffc5..666a7cae8a 100644 --- a/.github/workflows/kind-e2e.yaml +++ b/.github/workflows/kind-e2e.yaml @@ -35,7 +35,7 @@ jobs: registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }} - name: Install Cosign - uses: sigstore/cosign-installer@v2.5.1 + uses: sigstore/cosign-installer@v2.6.0 with: cosign-release: 'v1.7.2' diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml index 38b159a021..6ae95c4c3e 100644 --- a/.github/workflows/sbom.yaml +++ b/.github/workflows/sbom.yaml @@ -115,7 +115,7 @@ jobs: unzip tools-java-${SPDX_TOOLS_VERSION}.zip - name: Install Cosign - uses: sigstore/cosign-installer@v2.5.1 + uses: sigstore/cosign-installer@v2.6.0 with: cosign-release: 'v1.7.2'