chore(deps): pin sigstore/cosign-installer action to 1fc5bd3

tbckr · Dec 8, 2023 · f6c9fd1 · f6c9fd1
1 parent 7d14805
commit f6c9fd1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -76,7 +76,7 @@ jobs:
         if: ${{ steps.release.outputs.release_created }}
       - uses: anchore/sbom-action/download-syft@fd74a6fb98a204a1ad35bbfae0122c1a302ff88b # v0.15.0
         if: ${{ steps.release.outputs.release_created }}
-      - uses: sigstore/cosign-installer@v3
+      - uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 # v3
         if: ${{ steps.release.outputs.release_created }}
 
       # Login to ghcr.io