update action to use latest cosign v2.2.2 (#153)

cpanato · web-flow · commit 9614fae9e5c5 · 2023-12-11T15:12:06.000+01:00
Signed-off-by: cpanato &lt;ctadeu@gmail.com&gt;
diff --git a/README.md b/README.md
@@ -13,9 +13,9 @@ This action currently supports GitHub-provided Linux, macOS and Windows runners
 Add the following entry to your Github workflow YAML file:
 
 ```yaml
-uses: sigstore/cosign-installer@v3.1.1
+uses: sigstore/cosign-installer@v3.3.0
 with:
-  cosign-release: 'v2.1.1' # optional
+  cosign-release: 'v2.2.2' # optional
 ```
 
 Example using a pinned version:
@@ -30,9 +30,9 @@ jobs:
     name: Install Cosign
     steps:
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.1.1
+        uses: sigstore/cosign-installer@v3.3.0
         with:
-          cosign-release: 'v2.2.1'
+          cosign-release: 'v2.2.2'
       - name: Check install!
         run: cosign version
 ```
@@ -49,7 +49,7 @@ jobs:
     name: Install Cosign
     steps:
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.1.1
+        uses: sigstore/cosign-installer@v3.3.0
       - name: Check install!
         run: cosign version
 ```
@@ -73,7 +73,7 @@ jobs:
           go-version: '1.21'
           check-latest: true
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.1.1
+        uses: sigstore/cosign-installer@v3.3.0
         with:
           cosign-release: main
       - name: Check install!
@@ -105,7 +105,7 @@ jobs:
           fetch-depth: 1
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v3.1.1
+        uses: sigstore/cosign-installer@v3.3.0
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2.1.0
diff --git a/action.yml b/action.yml
@@ -10,7 +10,7 @@ inputs:
   cosign-release:
     description: 'cosign release version to be installed'
     required: false
-    default: 'v2.2.1'
+    default: 'v2.2.2'
   install-dir:
     description: 'Where to install the cosign binary'
     required: false
@@ -65,13 +65,13 @@ runs:
           esac
         }
 
-        bootstrap_version='v2.2.1'
-        bootstrap_linux_amd64_sha='f6c24066e7f75221c4b7f309b8322d7d42a1d96470e0440e6e357fe43661d81f'
-        bootstrap_linux_arm_sha='8ceaffbde4970338b51b77a4a6321348e47c7d27bd19f7f502768f8208f5b8e2'
-        bootstrap_linux_arm64_sha='8c04e9877fb6e3a96a3916d4dfa855a493c418ace5d5ec4dba6a249490f888d1'
-        bootstrap_darwin_amd64_sha='f1a948cded75e0858e739d90604e2a7e4d2f3fda15bfef12c0c03726567443bc'
-        bootstrap_darwin_arm64_sha='a9ca33020c41ad245ec595c7097c9280e29e5afdd95ab19359a65d6e1a756777'
-        bootstrap_windows_amd64_sha='88eea88aff14bc42cc00b9212b4cee7a20779836731bf83768cc1d9006cf386d'
+        bootstrap_version='v2.2.2'
+        bootstrap_linux_amd64_sha='121ba0031827c090364894688049651d3a0a82a87235c469322a202aa2944211'
+        bootstrap_linux_arm_sha='46e1a98be7f1cbf8fe89ba3523a880444c2ba3cb0eea74c6ed1514b6db2555f9'
+        bootstrap_linux_arm64_sha='82eb62be7e1b7924db193d4a4a496eca94510df2961d88406ba07fb3435f6e8f'
+        bootstrap_darwin_amd64_sha='e3d43db982b642be15a622e3791480620f5e7f2e902ab0c9e2db21daaa36259e'
+        bootstrap_darwin_arm64_sha='7874404ce8a9b29251ff485c6ecb46ecfebd6b1f5fa3cb6cd0b9bf2c75bab2d5'
+        bootstrap_windows_amd64_sha='c33f389596f7763ef19674e6d5792c45d38d7b48c832955aa94eb17f12f2931e'
         cosign_executable_name=cosign
 
         trap "popd >/dev/null" EXIT
