pin signer:/ latest was mistake

Signed-off-by: Mangirdas Judeikis <Mangirdas@Judeikis.LT>
mjudeikis · Dec 16, 2024 · 2613967 · 2613967
1 parent 14e5d16
commit 2613967
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
@@ -19,9 +19,11 @@ jobs:
       with:
         go-version: v1.23.4
         check-latest: true
+    # We need this to remove local tags that are not semver so goreleaser doesn't get confused.
     - name: Delete non-semver tags
       run: 'git tag -d $(git tag -l | grep -v "^v")'
-    - uses: sigstore/cosign-installer@latest
+    # If you notice signing errors, you may need to update the cosign version.
+    - uses: sigstore/cosign-installer@@v3.7.0
     - name: Install ko
       run: go install github.com/google/ko@latest