diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 3dbcee8f..e06f36be 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -81,7 +81,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v2.5.0 with: - cosign-release: 'v1.9.0' + cosign-release: 'v1.10.0' - name: Install Syft uses: anchore/sbom-action/download-syft@v0.11.0 @@ -160,7 +160,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v2.5.0 with: - cosign-release: 'v1.9.0' + cosign-release: 'v1.10.0' - name: Install Syft uses: anchore/sbom-action/download-syft@v0.11.0 @@ -210,7 +210,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v2.5.0 with: - cosign-release: 'v1.9.0' + cosign-release: 'v1.10.0' - name: Sign provenance run: | @@ -246,7 +246,7 @@ jobs: - name: Install cosign uses: sigstore/cosign-installer@v2.5.0 with: - cosign-release: 'v1.9.0' + cosign-release: 'v1.10.0' - name: Generate provenance for ${{ matrix.repo }} uses: philips-labs/slsa-provenance-action@v0.8.0