Pin cosign-installer to v2 (#824)

We now have tags available in the cosign-installer, which allows us to
pin the latest release via `v2`.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
Sascha Grunert 2022-06-23 14:50:50 +02:00 committed by GitHub
parent a9b0ef0a11
commit 05f3ca80f9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -19,7 +19,7 @@ jobs:
with: with:
go-version: 1.18 go-version: 1.18
- name: Install Cosign - name: Install Cosign
uses: sigstore/cosign-installer@main uses: sigstore/cosign-installer@v2
with: with:
cosign-release: 'v1.6.0' cosign-release: 'v1.6.0'
- name: Store Cosign private key in a file - name: Store Cosign private key in a file