We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1949d14 commit fa49866Copy full SHA for fa49866
.github/workflows/release.yaml
@@ -28,7 +28,7 @@ jobs:
28
password: ${{ secrets.GITHUB_TOKEN }}
29
- name: Setup Cosign
30
uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
31
- - uses: anchore/sbom-action/download-syft@95b086ac308035dc0850b3853be5b7ab108236a8 # v0.16.1
+ - uses: anchore/sbom-action/download-syft@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0
32
- name: Create release and SBOM
33
if: startsWith(github.ref, 'refs/tags/v')
34
uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0
0 commit comments