Skip to content
Snippets Groups Projects
Verified Commit c63e9f1c authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

Merge remote-tracking branch 'origin/renovate/gcr.io-projectsigstore-cosign-2.x'

parents e975f606 09168364
Branches
Tags
1 merge request!1042chore(deps): update gcr.io/projectsigstore/cosign docker tag to v2.2.2
......@@ -29,7 +29,7 @@ fedora:
DO +MIRROR --image=quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
cosign:
DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.1
DO +MIRROR --image=gcr.io/projectsigstore/cosign:v2.2.2
SAVE ARTIFACT /ko-app/cosign ./cosign
# verify-distroless allows to use cosign to verify all mirrored distroless images against Google's build identity
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment