From 5c281b249c185b25a2f342630189f201c2faebed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Oct 2024 11:39:25 +0200 Subject: [PATCH] chore(deps): Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 (#1642) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.6.0 to 3.7.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/4959ce089c160fddf62f7b42464195ba1a56d382...dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build.yaml | 2 +- .github/workflows/kind-cluster-image-policy-no-tuf.yaml | 2 +- .github/workflows/kind-cluster-image-policy-trustroot.yaml | 2 +- .github/workflows/kind-cluster-image-policy-tsa.yaml | 2 +- .github/workflows/kind-cluster-image-policy.yaml | 2 +- .github/workflows/kind-e2e-cosigned.yaml | 2 +- .github/workflows/kind-e2e-trustroot-crd.yaml | 2 +- .github/workflows/policy-tester-examples.yml | 2 +- .github/workflows/release.yaml | 2 +- 9 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 47106b21a..625a95108 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -35,7 +35,7 @@ jobs: steps: - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0 - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: diff --git a/.github/workflows/kind-cluster-image-policy-no-tuf.yaml b/.github/workflows/kind-cluster-image-policy-no-tuf.yaml index 063608140..4c275615f 100644 --- a/.github/workflows/kind-cluster-image-policy-no-tuf.yaml +++ b/.github/workflows/kind-cluster-image-policy-no-tuf.yaml @@ -112,7 +112,7 @@ jobs: with: mirror: mirror.gcr.io - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Install cluster + sigstore uses: sigstore/scaffolding/actions/setup@main diff --git a/.github/workflows/kind-cluster-image-policy-trustroot.yaml b/.github/workflows/kind-cluster-image-policy-trustroot.yaml index 2141598d3..2552cc0ad 100644 --- a/.github/workflows/kind-cluster-image-policy-trustroot.yaml +++ b/.github/workflows/kind-cluster-image-policy-trustroot.yaml @@ -117,7 +117,7 @@ jobs: with: mirror: mirror.gcr.io - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Install cluster + sigstore uses: sigstore/scaffolding/actions/setup@main diff --git a/.github/workflows/kind-cluster-image-policy-tsa.yaml b/.github/workflows/kind-cluster-image-policy-tsa.yaml index 64dff1235..1972242f4 100644 --- a/.github/workflows/kind-cluster-image-policy-tsa.yaml +++ b/.github/workflows/kind-cluster-image-policy-tsa.yaml @@ -112,7 +112,7 @@ jobs: with: mirror: mirror.gcr.io - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v2 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v2 - name: Install cluster + sigstore uses: sigstore/scaffolding/actions/setup@main diff --git a/.github/workflows/kind-cluster-image-policy.yaml b/.github/workflows/kind-cluster-image-policy.yaml index ae7cf16ab..7fdfcdbf5 100644 --- a/.github/workflows/kind-cluster-image-policy.yaml +++ b/.github/workflows/kind-cluster-image-policy.yaml @@ -126,7 +126,7 @@ jobs: with: mirror: mirror.gcr.io - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Install cluster + sigstore uses: sigstore/scaffolding/actions/setup@main diff --git a/.github/workflows/kind-e2e-cosigned.yaml b/.github/workflows/kind-e2e-cosigned.yaml index 7448300f1..2884adbb9 100644 --- a/.github/workflows/kind-e2e-cosigned.yaml +++ b/.github/workflows/kind-e2e-cosigned.yaml @@ -104,7 +104,7 @@ jobs: - name: Install yq uses: mikefarah/yq@bbdd97482f2d439126582a59689eb1c855944955 # v4.44.3 - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Setup mirror uses: chainguard-dev/actions/setup-mirror@main diff --git a/.github/workflows/kind-e2e-trustroot-crd.yaml b/.github/workflows/kind-e2e-trustroot-crd.yaml index a26b529d0..f1e524cba 100644 --- a/.github/workflows/kind-e2e-trustroot-crd.yaml +++ b/.github/workflows/kind-e2e-trustroot-crd.yaml @@ -104,7 +104,7 @@ jobs: - name: Install yq uses: mikefarah/yq@bbdd97482f2d439126582a59689eb1c855944955 # v4.44.3 - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Setup mirror uses: chainguard-dev/actions/setup-mirror@main diff --git a/.github/workflows/policy-tester-examples.yml b/.github/workflows/policy-tester-examples.yml index 27d7cf78a..bfd0ccc62 100644 --- a/.github/workflows/policy-tester-examples.yml +++ b/.github/workflows/policy-tester-examples.yml @@ -49,7 +49,7 @@ jobs: run: | make policy-tester - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - name: Setup local registry run: | diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 14a507190..610f2afae 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -35,7 +35,7 @@ jobs: go-version-file: './go.mod' check-latest: true - - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 + - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da - uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2