From fb47215bce237df9cd9d9b3216c892c5ed78aa54 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 4 Feb 2025 21:57:21 +0000 Subject: [PATCH] chore(deps): update sigstore/cosign-installer action to v3.8.0 --- .github/actions/sign-image/action.yaml | 2 +- .github/actions/upload-sbom/action.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/sign-image/action.yaml b/.github/actions/sign-image/action.yaml index 36c6e88fe9..bb3a4ef8b7 100644 --- a/.github/actions/sign-image/action.yaml +++ b/.github/actions/sign-image/action.yaml @@ -14,7 +14,7 @@ runs: using: "composite" steps: - name: Install Cosign - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0 + uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e # v3.8.0 - name: Sign image with a key shell: bash run: | diff --git a/.github/actions/upload-sbom/action.yaml b/.github/actions/upload-sbom/action.yaml index 27e7a4788e..01e18b37e0 100644 --- a/.github/actions/upload-sbom/action.yaml +++ b/.github/actions/upload-sbom/action.yaml @@ -17,7 +17,7 @@ runs: using: "composite" steps: - name: Install Cosign - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0 + uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e # v3.8.0 - name: Attach sbom attestation to image shell: bash run: |