Update sigstore/cosign-installer action to v3.5.0

datosh-org · Apr 11, 2024 · 1f3d4e2 · 1f3d4e2
1 parent ac50b9a
commit 1f3d4e2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/calculator-svc.yml b/.github/workflows/calculator-svc.yml
@@ -61,7 +61,7 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Install Cosign CLI
-        uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0
+        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
       - name: Log in to ghcr.io
         id: docker-login
         uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
@@ -102,7 +102,7 @@ jobs:
           syftVersion: "0.98.0"
           grypeVersion: "0.73.3"
       - name: Install Cosign CLI
-        uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0
+        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
       - name: Generate and sign SBOM
         run: |
           syft attest -o cyclonedx-json \