From f48066a7be6cfa7f9a5663a88b6f15d4e6150c50 Mon Sep 17 00:00:00 2001
From: ybelMekk <youssef.bel.mekki@nav.no>
Date: Thu, 27 Apr 2023 11:46:52 +0200
Subject: [PATCH] chore(cosign): use version 2.0.2

---
 .github/workflows/main.yml | 2 +-
 Dockerfile                 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7ff43b6..a5aab88 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -11,7 +11,7 @@ on:
 env:
   VERSION: v0.11
   IMAGE_NAME: ghcr.io/${{ github.repository }}
-  COSIGN_VERSION: v1.13.1
+  COSIGN_VERSION: v2.0.2
   SYFT_VERSION: v0.44.1
   GO_RELEASER_VERSION: v1.11.2
   GRADLE_VERSION: 7.5.1
diff --git a/Dockerfile b/Dockerfile
index 1c34105..acde646 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -50,7 +50,7 @@ COPY --from=builder /src/salsa-sample.yaml .salsa.yaml
 RUN chmod +x /usr/local/bin/salsa
 
 # Verify and install Cosign
-ARG COSIGN_VERSION=v1.13.1
+ARG COSIGN_VERSION=v2.0.2
 ENV COSIGN_BINARY=cosign-linux-amd64
 ENV COSIGN_CHECKSUM=cosign_checksums.txt
 ENV COSIGN_PUBLIC_KEY=release-cosign.pub