We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ab2ecea commit 2db9b36Copy full SHA for 2db9b36
.github/workflows/release.yaml
@@ -34,7 +34,7 @@ jobs:
34
password: ${{ secrets.GITHUB_TOKEN }}
35
- name: Setup Cosign
36
uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 # v3.2.0
37
- - uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
+ - uses: anchore/sbom-action/download-syft@8e94d75ddd33f69f691467e42275782e4bfefe84 # v0.20.9
38
- name: Create release and SBOM
39
if: startsWith(github.ref, 'refs/tags/v')
40
uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
0 commit comments