Merge pull request #1771 from fluxcd/dependabot/github_actions/ci-8077bd6f50

build(deps): bump the ci group across 1 directory with 2 updates
This commit is contained in:
Stefan Prodan
2025-03-23 09:29:16 +02:00
committed by GitHub
2 changed files with 3 additions and 3 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ jobs:
packages: write
steps:
- uses: actions/checkout@v4
- uses: sigstore/cosign-installer@v3.7.0
- uses: sigstore/cosign-installer@v3.8.1
- name: Prepare
id: prep
run: |
+2 -2
View File
@@ -33,7 +33,7 @@ jobs:
with:
go-version: 1.24.x
- uses: fluxcd/flux2/action@main
- uses: sigstore/cosign-installer@v3.7.0
- uses: sigstore/cosign-installer@v3.8.1
- name: Prepare
id: prep
run: |
@@ -146,7 +146,7 @@ jobs:
actions: read # for detecting the Github Actions environment.
id-token: write # for creating OIDC tokens for signing.
contents: write # for uploading attestations to GitHub releases.
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
with:
provenance-name: "provenance.intoto.jsonl"
base64-subjects: "${{ needs.release-flagger.outputs.hashes }}"