1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2024-12-31 01:53:50 +02:00

chore(deps): bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#5183)

This commit is contained in:
dependabot[bot] 2024-10-07 11:44:10 +00:00 committed by GitHub
parent 42185b6db0
commit 156f49522b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 3 additions and 3 deletions

View File

@ -51,7 +51,7 @@ jobs:
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v4
with:
go-version: stable
- uses: sigstore/cosign-installer@v3.6.0
- uses: sigstore/cosign-installer@v3.7.0
- uses: anchore/sbom-action/download-syft@v0.17.2
- name: setup-validate-krew-manifest
run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest

View File

@ -28,7 +28,7 @@ jobs:
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v4
with:
go-version: stable
- uses: sigstore/cosign-installer@v3.6.0
- uses: sigstore/cosign-installer@v3.7.0
- uses: anchore/sbom-action/download-syft@v0.17.2
- uses: crazy-max/ghaction-upx@v3
with:

View File

@ -93,7 +93,7 @@ jobs:
./dist/*.rpm
./dist/*.apk
key: ${{ github.ref }}
- uses: sigstore/cosign-installer@v3.6.0
- uses: sigstore/cosign-installer@v3.7.0
- uses: anchore/sbom-action/download-syft@v0.17.2
- uses: crazy-max/ghaction-upx@v3
with: