Browse Source

update cosign installer action

Signed-off-by: cpanato <ctadeu@gmail.com>
cpanato 3 years ago
parent
commit
5d67325213
2 changed files with 4 additions and 8 deletions
  1. 2 4
      .github/workflows/ci.yml
  2. 2 4
      .github/workflows/release.yml

+ 2 - 4
.github/workflows/ci.yml

@@ -259,13 +259,11 @@ jobs:
 
 
       - name: Install cosign
       - name: Install cosign
         if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
         if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
-        uses: sigstore/cosign-installer@main
-        with:
-          cosign-release: 'v1.6.0'
+        uses: sigstore/cosign-installer@v2.4.0
 
 
       - name: Sign Artifacts to main release channel
       - name: Sign Artifacts to main release channel
         if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
         if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
         run: make docker.sign
         run: make docker.sign
         env:
         env:
           RELEASE_TAG: main
           RELEASE_TAG: main
-          COSIGN_EXPERIMENTAL: 1
+          COSIGN_EXPERIMENTAL: true

+ 2 - 4
.github/workflows/release.yml

@@ -126,9 +126,7 @@ jobs:
 
 
       - name: Install cosign
       - name: Install cosign
         if: env.GHCR_USERNAME != ''
         if: env.GHCR_USERNAME != ''
-        uses: sigstore/cosign-installer@main
-        with:
-          cosign-release: 'v1.6.0'
+        uses: sigstore/cosign-installer@v2.4.0
 
 
       - name: Sign Container Image
       - name: Sign Container Image
         if: env.GHCR_USERNAME != ''
         if: env.GHCR_USERNAME != ''
@@ -136,4 +134,4 @@ jobs:
         env:
         env:
           RELEASE_TAG: ${{ github.event.inputs.version }}
           RELEASE_TAG: ${{ github.event.inputs.version }}
           SOURCE_TAG: main
           SOURCE_TAG: main
-          COSIGN_EXPERIMENTAL: 1
+          COSIGN_EXPERIMENTAL: true