fulcio/1.6.5-r0: cve remediation (#36951)

fulcio/1.6.5-r0: fix GHSA-v778-237x-gjrc Advisory data: https://github.com/wolfi-dev/advisories/blob/main/fulcio.advisories.yaml Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Dec 13, 2024 · e023fb5 · e023fb5
1 parent d600b6d
commit e023fb5
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/fulcio.yaml b/fulcio.yaml
@@ -1,7 +1,7 @@
 package:
   name: fulcio
   version: 1.6.5
-  epoch: 0
+  epoch: 1
   description: Sigstore OIDC PKI
   copyright:
     - license: Apache-2.0
@@ -17,6 +17,11 @@ pipeline:
       repository: https://github.com/sigstore/fulcio
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+      modroot: .
+
   - uses: go/build
     with:
       ldflags: -s -w