actions/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2024-12-24 11:35:52 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Pin cosign-installer to v2 (#824)

Browse source 
We now have tags available in the cosign-installer, which allows us to
pin the latest release via `v2`.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
Sascha Grunert 2022-06-23 14:50:50 +02:00 committed by GitHub
parent a9b0ef0a11
commit 05f3ca80f9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/release.yml vendored
View file

@ -10,7 +10,7 @@ jobs:
GO111MODULE: on
ACTIONS_ALLOW_UNSECURE_COMMANDS: true
steps:
- name: Checkout Source
- name: Checkout Source
uses: actions/checkout@v3
- name: Unshallow
run: git fetch --prune --unshallow
@ -19,7 +19,7 @@ jobs:
with:
go-version: 1.18
- name: Install Cosign
uses: sigstore/cosign-installer@main
uses: sigstore/cosign-installer@v2
with:
cosign-release: 'v1.6.0'
- name: Store Cosign private key in a file