mirror of
https://github.com/securego/gosec.git
synced 2024-12-25 03:55:54 +00:00
Pin cosign-installer to v2
(#824)
We now have tags available in the cosign-installer, which allows us to pin the latest release via `v2`. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
parent
a9b0ef0a11
commit
05f3ca80f9
1 changed files with 2 additions and 2 deletions
4
.github/workflows/release.yml
vendored
4
.github/workflows/release.yml
vendored
|
@ -10,7 +10,7 @@ jobs:
|
||||||
GO111MODULE: on
|
GO111MODULE: on
|
||||||
ACTIONS_ALLOW_UNSECURE_COMMANDS: true
|
ACTIONS_ALLOW_UNSECURE_COMMANDS: true
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout Source
|
- name: Checkout Source
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
- name: Unshallow
|
- name: Unshallow
|
||||||
run: git fetch --prune --unshallow
|
run: git fetch --prune --unshallow
|
||||||
|
@ -19,7 +19,7 @@ jobs:
|
||||||
with:
|
with:
|
||||||
go-version: 1.18
|
go-version: 1.18
|
||||||
- name: Install Cosign
|
- name: Install Cosign
|
||||||
uses: sigstore/cosign-installer@main
|
uses: sigstore/cosign-installer@v2
|
||||||
with:
|
with:
|
||||||
cosign-release: 'v1.6.0'
|
cosign-release: 'v1.6.0'
|
||||||
- name: Store Cosign private key in a file
|
- name: Store Cosign private key in a file
|
||||||
|
|
Loading…
Reference in a new issue