From d31bcb967ace062e1663d3e227bb04bcb83e33f6 Mon Sep 17 00:00:00 2001 From: Ouvill Date: Fri, 10 Feb 2023 17:05:33 +0900 Subject: [PATCH] fix update cosign version on docker-publish.yml (#1917) upgrade cosign version https://github.com/sigstore/cosign/releases/tag/v1.13.1 The current version is out of date and the following error occurs ``` getting signer: getting key from Fulcio: verifying SCT: updating local metadata and targets: error updating to TUF remote mirror: tuf: invalid key ``` Co-authored-by: Sampark Sharma --- ci/docker-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/docker-publish.yml b/ci/docker-publish.yml index 11dd662..d57b2f1 100644 --- a/ci/docker-publish.yml +++ b/ci/docker-publish.yml @@ -43,7 +43,7 @@ jobs: if: github.event_name != 'pull_request' uses: sigstore/cosign-installer@f3c664df7af409cb4873aa5068053ba9d61a57b6 #v2.6.0 with: - cosign-release: 'v1.11.0' + cosign-release: 'v1.13.1' # Workaround: https://github.com/docker/build-push-action/issues/461