forked from repo-mirrors/cnpg-postgres-containers
Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#182)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.1 to 3.8.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d7d6bc7722...3454372f43
)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
4
.github/workflows/bake.yaml
vendored
4
.github/workflows/bake.yaml
vendored
@@ -71,7 +71,7 @@ jobs:
|
||||
|
||||
# Even if we're testing we sign the images, so we can push them to production later if that's required
|
||||
- name: Install cosign
|
||||
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3
|
||||
uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3
|
||||
# See https://github.blog/security/supply-chain-security/safeguard-container-signing-capability-actions/
|
||||
# and https://github.com/actions/starter-workflows/blob/main/ci/docker-publish.yml for more details on
|
||||
# how to use cosign.
|
||||
@@ -172,7 +172,7 @@ jobs:
|
||||
done
|
||||
|
||||
- name: Install cosign
|
||||
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3
|
||||
uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3
|
||||
|
||||
- name: Sign images
|
||||
run: |
|
||||
|
Reference in New Issue
Block a user