Sourced from sigstore/cosign-installer's releases.
v3.0.5
What's Changed
- download cosign releases from GitHub rather than GCS by
@​bobcallaway
in sigstore/cosign-installer#126Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.0.4...v3.0.5
v3.0.4
- Include fix for sigstore/cosign-installer#124
dd6b2e2
download cosign releases from GitHub rather than GCS (#126)8e47e41
add --yes option to cosign sign (#125)87f4580
Remove warning about OIDC signing being experimental (#123)03d0fec
Fix unsafe evaluation of inputs.use-sudo (#124)46b5db7
use intermediate environment variables to avoid risks of script
injection (#122)84448ba
we should rely upon the digests not the tags, typos (#121)