From 7c8185047ac6d37fc6a00b494e270e33325bab21 Mon Sep 17 00:00:00 2001 From: Carlos Alexandro Becker Date: Thu, 16 Dec 2021 21:04:52 -0300 Subject: [PATCH] chore(ci): use download syft action (#2767) Signed-off-by: Carlos A Becker --- .github/workflows/build.yml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 1b26c6a2e..1a5bfc3b7 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -86,10 +86,7 @@ jobs: ./dist/*.apk key: ${{ runner.os }}-go-${{ hashFiles('**/*.go') }}-${{ hashFiles('**/go.sum') }} - uses: sigstore/cosign-installer@v1.4.1 - - name: setup-syft - run: | - curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | \ - sh -s -- -b /usr/local/bin v0.32.2 + - uses: anchore/sbom-action/download-syft@v0.5.0 - name: setup-validate-krew-manifest # TODO: replace this once https://github.com/kubernetes-sigs/krew/pull/736 is merged run: go install github.com/caarlos0/krew/cmd/validate-krew-manifest@fork