From 09cf122d682814f62579dae0ce9fba53c5d9c64b Mon Sep 17 00:00:00 2001 From: Eric Van Hensbergen Date: Sun, 6 Nov 2022 22:21:31 -0600 Subject: [PATCH] update cosign version to fix signature issue (#2) According to: https://github.com/slsa-framework/slsa-github-generator/issues/1163 it was due to a key rotation error and shouldn't happen on newer release of cosign - so we are going to the bleeding edge and seeing if it fixes it. Signed-off-by: Eric Van Hensbergen Signed-off-by: Eric Van Hensbergen --- .github/workflows/docker-buildx.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-buildx.yml b/.github/workflows/docker-buildx.yml index f283897..fe7ad0a 100644 --- a/.github/workflows/docker-buildx.yml +++ b/.github/workflows/docker-buildx.yml @@ -42,7 +42,7 @@ jobs: if: github.event_name != 'pull_request' uses: sigstore/cosign-installer@f3c664df7af409cb4873aa5068053ba9d61a57b6 #v2.6.0 with: - cosign-release: 'v1.11.0' + cosign-release: 'v1.13.1' # Workaround: https://github.com/docker/build-push-action/issues/461