From 0fa6007b34d4258cb88db9fe98bdf09285ca6c43 Mon Sep 17 00:00:00 2001 From: Yury Tsarev Date: Tue, 19 Dec 2023 20:22:09 +0100 Subject: [PATCH] Fix cosign install part of the release pipeline * Apparently old location for cosign binaries is not valid anymore * Update to the latest https://github.com/sigstore/cosign-installer/releases/tag/v3.3.0 * Fixes #1361 * Tested in the fork https://github.com/ytsarev/k8gb/actions/runs/7266564082/job/19798553048 Notice that 'Install Cosign' step is passing there Signed-off-by: Yury Tsarev --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 21f4840b7b..2b997a5638 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -48,7 +48,7 @@ jobs: filterByMilestone: true unreleased: true - name: Install Cosign - uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76 # renovate: tag=v2.7.0 + uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # renovate: tag=v3.3.0 with: cosign-release: 'v1.12.1' - name: Install Syft