Updated sigstore

CoverGo · Mar 20, 2024 · 6c7e5d6 · 6c7e5d6
1 parent 3b056bd
commit 6c7e5d6
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.gflows/libs/build_publish_steps.lib.yml b/.gflows/libs/build_publish_steps.lib.yml
@@ -81,7 +81,7 @@ with:
 ---
 #@ def _setup_cosign():
 name: Set up sigstore cosign
-uses: sigstore/cosign-installer@latest
+uses: sigstore/cosign-installer@main
 #@ end
 ---
 #@ def _sign_container_with_cosign(image_name, image_digest):

diff --git a/github-sample/workflows/build-publish.yml b/github-sample/workflows/build-publish.yml
@@ -922,7 +922,7 @@ jobs:
         src: ghcr.io/covergo/auth:candidate-${{ needs.version.outputs.app_version }}
         dst: ${{ steps.github-tags-auth-service.outputs.docker_image_ghcr_tags }}
     - name: Set up sigstore cosign
-      uses: sigstore/cosign-installer@latest
+      uses: sigstore/cosign-installer@main
     - name: Sign published container image
       run: cosign sign --key env://COSIGN_PRIVATE_KEY ghcr.io/covergo/auth:${{ needs.version.outputs.app_version }}@${{ needs.docker-build-auth-service.outputs.digest }}
       env:
@@ -993,7 +993,7 @@ jobs:
         event-type: helm_release
         client-payload: '{"ref_name": "${{ github.ref_name }}"}'
     - name: Set up sigstore cosign
-      uses: sigstore/cosign-installer@latest
+      uses: sigstore/cosign-installer@main
     - name: Sign published container image
       run: cosign sign --key env://COSIGN_PRIVATE_KEY registry-intl.cn-hongkong.aliyuncs.com/covergo/auth:${{ needs.version.outputs.app_version }}@${{ needs.docker-build-auth-service.outputs.digest }}
       env:
@@ -1049,7 +1049,7 @@ jobs:
         src: ghcr.io/covergo/auth-predeployment:candidate-${{ needs.version.outputs.app_version }}
         dst: ${{ steps.github-tags-auth-predeployment.outputs.docker_image_ghcr_tags }}
     - name: Set up sigstore cosign
-      uses: sigstore/cosign-installer@latest
+      uses: sigstore/cosign-installer@main
     - name: Sign published container image
       run: cosign sign --key env://COSIGN_PRIVATE_KEY ghcr.io/covergo/auth-predeployment:${{ needs.version.outputs.app_version }}@${{ needs.docker-build-auth-predeployment.outputs.digest }}
       env:
@@ -1120,7 +1120,7 @@ jobs:
         event-type: helm_release
         client-payload: '{"ref_name": "${{ github.ref_name }}"}'
     - name: Set up sigstore cosign
-      uses: sigstore/cosign-installer@latest
+      uses: sigstore/cosign-installer@main
     - name: Sign published container image
       run: cosign sign --key env://COSIGN_PRIVATE_KEY registry-intl.cn-hongkong.aliyuncs.com/covergo/auth-predeployment:${{ needs.version.outputs.app_version }}@${{ needs.docker-build-auth-predeployment.outputs.digest }}
       env: