Merge pull request #3090 from fosrl/github-action-cosign

Upgrade cosign installer to v4.1.2 and pin cosign version
Update cosign installer version in CI workflow
2026-09-08 12:13:16 +02:00 · 2026-05-16 14:53:24 -07:00 · 2026-05-16 16:21:13 +02:00 · 2026-05-16 16:17:45 +02:00
1 changed files with 3 additions and 1 deletions
@@ -415,7 +415,9 @@ jobs:

            - name: Install cosign
              # cosign is used to sign container images using keyless (OIDC) signing
-              uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
+              uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
+              with:
+                cosign-release: v3.0.6

            - name: Sign (GHCR, keyless)
              # Sign each GHCR image by digest using keyless (OIDC) signing via Sigstore/Rekor.
Author	SHA1	Message	Date
Owen Schwartz	159e91a07c	Merge pull request #3090 from fosrl/github-action-cosign Upgrade cosign installer to v4.1.2 and pin cosign version	2026-05-16 14:53:24 -07:00
Marc Schäfer	3322f1ccb4	Update cosign installer version in CI workflow	2026-05-16 16:21:13 +02:00
Marc Schäfer	1b17fba19f	Upgrade cosign installer to v4.1.2 and pin cosign version Updated cosign installer to version 4.1.2 and specified cosign release version.	2026-05-16 16:17:45 +02:00