From c81a566d801937a673b4fe4620d1070aff2e77a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Feb 2024 01:45:35 +0000 Subject: [PATCH] Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/9614fae9e5c5eddabb09f90a270fcb487c9f7149...e1523de7571e31dbe865fd2e80c5c7c23ae71eb4) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/image.yaml | 2 +- .github/workflows/kind-e2e.yaml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/sbom.yaml | 6 +++--- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml index 4d4d7a872d..70eab46535 100644 --- a/.github/workflows/image.yaml +++ b/.github/workflows/image.yaml @@ -20,7 +20,7 @@ jobs: with: go-version-file: 'go.mod' check-latest: true - - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 # Build ko from HEAD, build and push an image tagged with the commit SHA, # then keylessly sign it with cosign. diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml index 46075602bd..825ec04274 100644 --- a/.github/workflows/kind-e2e.yaml +++ b/.github/workflows/kind-e2e.yaml @@ -36,7 +36,7 @@ jobs: registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }} - name: Install Cosign - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - name: Run Smoke Test run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eb3b0daca0..077f7d1c67 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -34,7 +34,7 @@ jobs: - uses: imjasonh/setup-crane@00c9e93efa4e1138c9a7a5c594acd6c75a2fbf0c # v0.3 - - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - name: Set tag output id: tag diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml index be75c25d75..a6e9b02ab9 100644 --- a/.github/workflows/sbom.yaml +++ b/.github/workflows/sbom.yaml @@ -23,7 +23,7 @@ jobs: go-version-file: 'go.mod' check-latest: true - uses: chainguard-dev/actions/setup-registry@main - - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - name: Install CycloneDX run: | @@ -55,7 +55,7 @@ jobs: go-version-file: 'go.mod' check-latest: true - uses: chainguard-dev/actions/setup-registry@main - - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - name: Install SPDX Tools run: | @@ -88,7 +88,7 @@ jobs: go-version-file: 'go.mod' check-latest: true - uses: chainguard-dev/actions/setup-registry@main - - uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0 + - uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0 - name: Install SPDX Tools run: |