From a4ef70eaf8dad03cb1e26cd952d55f66bc290610 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 May 2026 14:17:04 +0100 Subject: [PATCH] build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#6377) Signed-off-by: dependabot[bot] --- .github/workflows/push-docker-base.yml | 2 +- .github/workflows/push-docker.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml index 0b9869de1..a132df2b2 100644 --- a/.github/workflows/push-docker-base.yml +++ b/.github/workflows/push-docker-base.yml @@ -100,7 +100,7 @@ jobs: sbom: true - name: Install cosign - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 with: cosign-release: "v2.4.1" diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml index b760000a1..937ca0d09 100644 --- a/.github/workflows/push-docker.yml +++ b/.github/workflows/push-docker.yml @@ -96,13 +96,13 @@ jobs: - name: Install cosign if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 with: cosign-release: "v2.4.1" - name: Install cosign if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 with: cosign-release: "v2.4.1"