Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Mirrored from https://github.com/Slazee/caddy.git
Synced Nov 11, 04:45 UTC
ci: pin cosign to v2 for release signing (#8092)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Francis Lavoie committed
Sep 30, 2026 at 18:11 UTC
ac834b5dc70a17dca296f47c78c64587d6631cbb
1 file changed
+5
.github/workflows/release.yml
+5
@@ -416,6 +416,11 @@ jobs:
416
417
- name: Install Cosign
418
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # main
419
+ with:
420
+ # cosign v3 defaults to the new bundle format, which ignores
421
+ # --output-signature/--output-certificate and requires --bundle.
422
+ # Stay on v2 until we deliberately migrate to bundles (#7674).
423
+ cosign-release: 'v2.6.5'
424
- name: Cosign version
425
run: cosign version
426
- name: Install Syft