We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent a60d5d4 commit 1d0f96eCopy full SHA for 1d0f96e
.github/workflows/release.yaml
@@ -33,7 +33,7 @@ jobs:
33
password: ${{ secrets.GITHUB_TOKEN }}
34
- name: Setup Cosign
35
uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
36
- - uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+ - uses: anchore/sbom-action/download-syft@f5e124a5e5e1d497a692818ae907d3c45829d033 # v0.17.3
37
- name: Create release and SBOM
38
if: startsWith(github.ref, 'refs/tags/v')
39
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
0 commit comments