Bump cosign to 0.0.20 for google cloud / workstation signing

This makes signing and publishing of sboms "just work" on a google cloud / workstation instance. So on a workstation, you can just 'make image/busybox' and sboms will be populated. See chainguard-dev/terraform-provider-cosign#158 for more information Signed-off-by: Scott Moser <scott.moser@chainguard.com>
smoser · Apr 27, 2024 · 555084f · 555084f
1 parent 732a680
commit 555084f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 9 deletions.
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
diff --git a/tflib/publisher/main.tf b/tflib/publisher/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     cosign = {
       source  = "chainguard-dev/cosign"
-      version = "0.0.19"
+      version = "0.0.20"
     }
     apko = {
       source  = "chainguard-dev/apko"