From 7eafb95903907244c88e05ee70e7fdc74d1b1d09 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 18 Oct 2022 23:07:07 -0500 Subject: [PATCH] Update sigstore/cosign-installer action to v2.8.1 (#930) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [sigstore/cosign-installer](https://togithub.com/sigstore/cosign-installer) | action | patch | `v2.8.0` -> `v2.8.1` | --- ### Release Notes
sigstore/cosign-installer ### [`v2.8.1`](https://togithub.com/sigstore/cosign-installer/releases/tag/v2.8.1) [Compare Source](https://togithub.com/sigstore/cosign-installer/compare/v2.8.0...v2.8.1) ##### What's Changed - bump cosign install to use release v1.13.1 by [@​cpanato](https://togithub.com/cpanato) in [https://github.com/sigstore/cosign-installer/pull/98](https://togithub.com/sigstore/cosign-installer/pull/98) **Full Changelog**: https://github.com/sigstore/cosign-installer/compare/v2...v2.8.1
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, click this checkbox. --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/defenseunicorns/zarf). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/build-rust-injector.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-rust-injector.yml b/.github/workflows/build-rust-injector.yml index 662b07502d..b350c89637 100644 --- a/.github/workflows/build-rust-injector.yml +++ b/.github/workflows/build-rust-injector.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: "Dependency: Install cosign" - uses: sigstore/cosign-installer@v2.8.0 + uses: sigstore/cosign-installer@v2.8.1 - name: "Dependency: Setup rust toolchain" run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index dcd91de787..4d85ceaf6d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -15,7 +15,7 @@ jobs: go-version: 1.19.x - name: "Dependency: Install cosign" - uses: sigstore/cosign-installer@v2.8.0 + uses: sigstore/cosign-installer@v2.8.1 - name: "Dependency: Install Syft" uses: anchore/sbom-action/download-syft@v0.12.0