We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 7547aad commit 4d24d63Copy full SHA for 4d24d63
.github/workflows/build-and-sign-image.yml
@@ -23,6 +23,9 @@ jobs:
23
- name: Checkout
24
uses: actions/checkout@v4
25
26
+ - name: Clear Sigstore cache
27
+ run: rm -rf ~/.sigstore
28
+
29
- uses: anchore/sbom-action@v0
30
with:
31
image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
@@ -31,9 +34,9 @@ jobs:
34
registry-password: ${{ secrets.GITHUB_TOKEN }}
32
35
33
36
- name: Install cosign
- uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 #v3.0.2
37
+ uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da #v3.7.0
38
- cosign-release: 'v1.13.1'
39
+ cosign-release: 'v2.4.1'
40
41
- name: Log into registry ${{ env.REGISTRY }} for ${{ github.actor }}
42
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
0 commit comments