We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 047d4a0 commit d608913Copy full SHA for d608913
.github/workflows/release.yaml
@@ -54,7 +54,7 @@ jobs:
54
with:
55
go-version: "1.21"
56
- name: Install cosign
57
- uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # main
+ uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # main
58
- name: Install syft
59
uses: anchore/sbom-action/download-syft@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
60
@@ -163,7 +163,7 @@ jobs:
163
format: "spdx-json"
164
output: "spdx.sbom.json"
165
166
167
- name: Sign image and sbom
168
run: |
169
#!/usr/bin/env bash
0 commit comments