From e9eda52291729e95c1ed1e9b42d968176ee664d9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Jun 2023 13:17:09 +0000 Subject: [PATCH] chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#4141) --- .github/workflows/build.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7d9ec0514..699276b69 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -54,7 +54,7 @@ jobs: - uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4 with: go-version: stable - - uses: sigstore/cosign-installer@v3.0.5 + - uses: sigstore/cosign-installer@v3.1.0 - uses: anchore/sbom-action/download-syft@v0.14.3 - name: setup-validate-krew-manifest run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c89ce84e2..cb7d02bdf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -96,7 +96,7 @@ jobs: ./dist/*.rpm ./dist/*.apk key: ${{ github.ref }} - - uses: sigstore/cosign-installer@v3.0.5 + - uses: sigstore/cosign-installer@v3.1.0 - uses: anchore/sbom-action/download-syft@v0.14.3 - uses: crazy-max/ghaction-upx@v2 with: