Bump cosign to v1.7.1

philips-labs · Apr 11, 2022 · 42a888f · 42a888f
1 parent 781e803
commit 42a888f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -81,7 +81,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v2.2.0
         with:
-          cosign-release: 'v1.6.0'
+          cosign-release: 'v1.7.1'
 
       - name: Install Syft
         uses: anchore/sbom-action/download-syft@v0.8.0
@@ -160,7 +160,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v2.2.0
         with:
-          cosign-release: v1.6.0'
+          cosign-release: v1.7.1'
 
       - name: Install Syft
         uses: anchore/sbom-action/download-syft@v0.8.0
@@ -210,7 +210,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v2.2.0
         with:
-          cosign-release: v1.6.0'
+          cosign-release: v1.7.1'
 
       - name: Sign provenance
         run: |
@@ -246,7 +246,7 @@ jobs:
       - name: Install cosign
         uses: sigstore/cosign-installer@v2.2.0
         with:
-          cosign-release: v1.6.0'
+          cosign-release: v1.7.1'
 
       - name: Generate provenance for ${{ matrix.repo }}
         uses: philips-labs/slsa-provenance-action@v0.7.2