mirror of
https://github.com/goreleaser/goreleaser.git
synced 2025-03-17 20:47:50 +02:00
fix: update cosign in docker img to 1.12.0 (#3379)
fix for https://github.com/sigstore/cosign/security/advisories/GHSA-8gw7-4j42-w388 Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
This commit is contained in:
parent
826944d62f
commit
69e9b2b120
@ -13,7 +13,7 @@ RUN apk add --no-cache bash \
|
||||
tini
|
||||
|
||||
# install cosign
|
||||
COPY --from=gcr.io/projectsigstore/cosign:v1.11.1@sha256:f9fd5a287a67f4b955d08062a966df10f9a600b6b8583fd367bce3f1f000a429 /ko-app/cosign /usr/local/bin/cosign
|
||||
COPY --from=gcr.io/projectsigstore/cosign:v1.12.0@sha256:880cc3ec8088fa59a43025d4f20961e8abc7c732e276a211cfb8b66793455dd0 /ko-app/cosign /usr/local/bin/cosign
|
||||
|
||||
ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"]
|
||||
CMD [ "-h" ]
|
||||
|
Loading…
x
Reference in New Issue
Block a user