mirror of
https://github.com/securego/gosec.git
synced 2024-12-25 12:05:52 +00:00
Pin cosign-installer to v2
(#824)
We now have tags available in the cosign-installer, which allows us to pin the latest release via `v2`. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
parent
a9b0ef0a11
commit
05f3ca80f9
1 changed files with 2 additions and 2 deletions
2
.github/workflows/release.yml
vendored
2
.github/workflows/release.yml
vendored
|
@ -19,7 +19,7 @@ jobs:
|
||||||
with:
|
with:
|
||||||
go-version: 1.18
|
go-version: 1.18
|
||||||
- name: Install Cosign
|
- name: Install Cosign
|
||||||
uses: sigstore/cosign-installer@main
|
uses: sigstore/cosign-installer@v2
|
||||||
with:
|
with:
|
||||||
cosign-release: 'v1.6.0'
|
cosign-release: 'v1.6.0'
|
||||||
- name: Store Cosign private key in a file
|
- name: Store Cosign private key in a file
|
||||||
|
|
Loading…
Reference in a new issue