fulcio/1.6.5-r0: fix GHSA-v778-237x-gjrc

wolfi-dev · Dec 13, 2024 · 7d60f65 · 7d60f65
1 parent 595e2f2
commit 7d60f65
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/fulcio.yaml b/fulcio.yaml
@@ -1,7 +1,7 @@
 package:
   name: fulcio
   version: 1.6.5
-  epoch: 0
+  epoch: 1
   description: Sigstore OIDC PKI
   copyright:
     - license: Apache-2.0
@@ -17,6 +17,11 @@ pipeline:
       repository: https://github.com/sigstore/fulcio
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+      modroot: .
+
   - uses: go/build
     with:
       ldflags: -s -w