Update cosign to v2.2.3 in docker-publish.yml

actions / starter-workflows

Accelerating new GitHub Actions workflows

https://github.com/features/actions

Other

8.59k stars 5.08k forks source link

Open TK221 opened 3 months ago

TK221 commented 3 months ago

Updating cosign-installer to v3.4.0 and cosign to v.2.2.3, resulting in no more signing errors. https://blog.sigstore.dev/tuf-root-update/

invince commented 1 month ago

Fix works, great job

kj800x commented 1 month ago

Hi @yoannchaudet @JamesMGreene @alexisabril, sorry to cold tag like this, but what is the process for getting a PR like this reviewed and merged?

Newly generated docker publish workflows fail because they need this fix. It would be valuable to get this merged.