We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9c38655 commit ade5657Copy full SHA for ade5657
.github/workflows/release.yaml
@@ -34,7 +34,7 @@ jobs:
34
password: ${{ secrets.GITHUB_TOKEN }}
35
- name: Setup Cosign
36
uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 # v3.2.0
37
- - uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
+ - uses: anchore/sbom-action/download-syft@9fece9e20048ca9590af301449208b2b8861333b # v0.15.9
38
- name: Create release and SBOM
39
if: startsWith(github.ref, 'refs/tags/v')
40
uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
0 commit comments