mirror of
https://github.com/securego/gosec.git
synced 2025-03-17 20:57:54 +02:00
Pin cosign-installer to v2
(#824)
We now have tags available in the cosign-installer, which allows us to pin the latest release via `v2`. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
This commit is contained in:
parent
a9b0ef0a11
commit
05f3ca80f9
2
.github/workflows/release.yml
vendored
2
.github/workflows/release.yml
vendored
@ -19,7 +19,7 @@ jobs:
|
||||
with:
|
||||
go-version: 1.18
|
||||
- name: Install Cosign
|
||||
uses: sigstore/cosign-installer@main
|
||||
uses: sigstore/cosign-installer@v2
|
||||
with:
|
||||
cosign-release: 'v1.6.0'
|
||||
- name: Store Cosign private key in a file
|
||||
|
Loading…
x
Reference in New Issue
Block a user