Merge pull request #103 from controlplaneio-fluxcd/pin-cosign

matheuscscp · web-flow · commit dd12794b8359 · 2025-10-20T12:55:42.000+01:00
Ignore cosign v4 action in dependabot config
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
@@ -9,3 +9,7 @@ updates:
           - "*"
     schedule:
       interval: "weekly"
+    ignore:
+      - dependency-name: "sigstore/cosign-installer"
+        versions:
+          - "v4"
