From 3ed50e4d85f35324204465ab21a352e68999b85a Mon Sep 17 00:00:00 2001 From: Stefan Prodan Date: Wed, 26 Nov 2025 10:27:12 +0200 Subject: [PATCH] ci: Pin cosign to v2.6.1 (Flux compat) Signed-off-by: Stefan Prodan --- .github/workflows/release.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5825236..4fdc7eb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,7 +17,9 @@ jobs: packages: write # needed for ghcr access steps: - uses: actions/checkout@v5 - - uses: sigstore/cosign-installer@v3 + - uses: sigstore/cosign-installer@v4.0.0 + with: + cosign-release: v2.6.1 - uses: fluxcd/flux2/action@v2.7.3 - uses: stefanprodan/timoni/actions/setup@v0.25.2 - name: Setup Notation CLI