fixL upgrade cosign installer version in release 1.10 and use cosign …

…1.13.1 (kyverno#8813) Signed-off-by: Vishal Choudhary <[email protected]>
giantswarm · Nov 1, 2023 · 2da9474 · 2da9474
1 parent 6449c53
commit 2da9474
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml
@@ -56,9 +56,9 @@ jobs:
           version: v3.10.3
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
+        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v1.13.1'
 
       - name: Set version
         run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV

diff --git a/.github/workflows/images-publish.yaml b/.github/workflows/images-publish.yaml
@@ -41,9 +41,9 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
       - name: Install Cosign
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
+        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v1.13.1'
       - name: Publish kyverno
         id: publish-kyverno
         uses: ./.github/actions/publish-image

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -35,9 +35,9 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
       - name: Install Cosign
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
+        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v1.13.1'
       - name: Publish kyverno
         id: release-kyverno
         uses: ./.github/actions/publish-image
@@ -232,9 +232,9 @@ jobs:
         uses: ./.github/actions/setup-build-env
       - uses: creekorful/goreportcard-action@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9 # v1.0
       - name: Install Cosign
-        uses: sigstore/cosign-installer@dd6b2e2b610a11fd73dd187a43d57cc1394e35f9 # v3.0.5
+        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v1.13.1'
       - name: Make Release
         env:
           VERSION: ${{ github.ref_name }}
@@ -268,9 +268,9 @@ jobs:
         with:
           version: 0.35.0
       - name: Install Cosign
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
+        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v1.13.1'
       - name: Build yaml manifest
         run: VERSION=${{ github.ref_name }} make codegen-manifest-release
       - name: Upload install manifest