We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6a3231b commit e98e455Copy full SHA for e98e455
1 file changed
.github/workflows/release.yaml
@@ -27,7 +27,7 @@ jobs:
27
username: ${{ github.actor }}
28
password: ${{ secrets.GITHUB_TOKEN }}
29
- name: Setup Cosign
30
- uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
+ uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
31
- uses: anchore/sbom-action/download-syft@8e94d75ddd33f69f691467e42275782e4bfefe84 # v0.20.9
32
- name: Create release and SBOM
33
if: startsWith(github.ref, 'refs/tags/v')
0 commit comments