Merge pull request #82 from philips-labs/dependabot/github_actions/si…

…gstore/cosign-installer-2.5.0
philips-labs · Aug 4, 2022 · f498e8e · f498e8e
2 parents 76c7f50 + 210d039
commit f498e8e
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/.github/workflows/golang.yml b/.github/workflows/golang.yml
@@ -81,9 +81,9 @@ jobs:
           check-latest: true
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@v2.4.1
+        uses: sigstore/cosign-installer@v2.5.0
         with:
-          cosign-release: 'v1.9.0'
+          cosign-release: 'v1.10.0'
 
       - name: Checkout
         uses: actions/checkout@v3
@@ -160,9 +160,9 @@ jobs:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@v2.4.1
+        uses: sigstore/cosign-installer@v2.5.0
         with:
-          cosign-release: 'v1.9.0'
+          cosign-release: 'v1.10.0'
 
       - name: Sign provenance
         run: |
@@ -196,9 +196,9 @@ jobs:
 
     steps:
       - name: Install cosign
-        uses: sigstore/cosign-installer@v2.4.1
+        uses: sigstore/cosign-installer@v2.5.0
         with:
-          cosign-release: 'v1.9.0'
+          cosign-release: 'v1.10.0'
 
       - name: Generate provenance for ${{ matrix.repo }}
         uses: philips-labs/slsa-provenance-action@v0.8.0