diff --git a/.github/workflows/docker-build-push.yml b/.github/workflows/docker-build-push.yml index 4a2dffd..c89bca6 100644 --- a/.github/workflows/docker-build-push.yml +++ b/.github/workflows/docker-build-push.yml @@ -67,7 +67,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - name: Install cosign if: github.ref == 'refs/heads/main' - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 - name: Sign the Docker image if: github.ref == 'refs/heads/main' working-directory: ${{ env.IMAGE }} diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index 8a40c10..bcff1d4 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -58,7 +58,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - name: Install cosign - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 - name: Sign the Docker image working-directory: ${{ env.IMAGE }} env: diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml index 3e02d4e..d339a33 100644 --- a/.github/workflows/dockerhub.yml +++ b/.github/workflows/dockerhub.yml @@ -40,7 +40,7 @@ jobs: IFS=$'\n\t' docker buildx imagetools inspect "${GITHUB_REPOSITORY_OWNER}/${IMAGE}:${{ matrix.tag }}" --format "{{ json (index .SBOM \"${{ matrix.platform }}\").SPDX }}" - name: Install cosign - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 - name: Verify the ${{ matrix.tag }} image signature shell: bash run: |