Specify version of ko for better build reproducibility

emsearcy · emsearcy · commit 7f702dc60f60 · 2025-02-07T11:31:31.000-08:00
Signed-off-by: Eric Searcy &lt;eric@linuxfoundation.org&gt;
diff --git a/.github/workflows/image-scan.yaml b/.github/workflows/image-scan.yaml
@@ -24,6 +24,8 @@ jobs:
         with:
           go-version-file: go.mod
       - uses: ko-build/setup-ko@v0.8
+        with:
+          version: v0.17.1
       - run: |
           ko build . --push=false --tarball "${RUNNER_TEMP}/image.tar" \
             --bare \
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -25,6 +25,8 @@ jobs:
         with:
           go-version-file: go.mod
       - uses: ko-build/setup-ko@v0.8
+        with:
+          version: v0.17.1
       - run: |
           ko build . \
             --bare \
