diff --git a/.github/workflows/job-docker-build-push.yml b/.github/workflows/job-docker-build-push.yml index e4e4cce..faa24ce 100644 --- a/.github/workflows/job-docker-build-push.yml +++ b/.github/workflows/job-docker-build-push.yml @@ -48,7 +48,7 @@ jobs: common_repository_token=${{ secrets.COMMON_REPOSITORY_TOKEN }} - name: Install Cosign if: ${{ (github.head_ref || github.ref) == format('refs/heads/{0}',inputs.release_branch) }} - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 - name: Sign container image if: ${{ (github.head_ref || github.ref) == format('refs/heads/{0}',inputs.release_branch) }} run: cosign sign --yes ${{ inputs.imageTagName }}@${{ steps.build.outputs.digest }}