diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index cbfb82c..2c5d18d 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -55,7 +55,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - name: Install cosign if: github.ref == 'refs/heads/main' - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Sign the Docker image if: github.ref == 'refs/heads/main' working-directory: ${{ env.IMAGE }} diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index b13445e..3360baa 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -50,7 +50,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - name: Install cosign - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Sign the Docker image working-directory: ${{ env.REPOSITORY }} env: diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml index 4f886aa..fed82c9 100644 --- a/.github/workflows/dockerhub.yml +++ b/.github/workflows/dockerhub.yml @@ -29,7 +29,7 @@ jobs: shell: bash run: docker buildx imagetools inspect "${GITHUB_REPOSITORY_OWNER}/${REPOSITORY}:${{ matrix.tag }}" --format "{{ json (index .SBOM \"${{ matrix.platform }}\").SPDX }}" - name: Install cosign - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 - name: Verify the ${{ matrix.tag }} image signature shell: bash run: |