pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-05-17 05:39:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Upgrade cosign installer to v4.1.2 and pin cosign version

Browse Source 
Updated cosign installer to version 4.1.2 and specified cosign release version.
This commit is contained in:
Marc Schäfer
2026-05-16 16:17:45 +02:00
committed by GitHub
parent 8c2e6965f1
commit 1b17fba19f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/cicd.yml vendored
View File

@@ -415,7 +415,9 @@ jobs:
- name: Install cosign
# cosign is used to sign container images using keyless (OIDC) signing
uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.2
with:
cosign-release: v3.0.6
- name: Sign (GHCR, keyless)
# Sign each GHCR image by digest using keyless (OIDC) signing via Sigstore/Rekor.