coder/.github/actions/install-cosign/action.yaml at 644820cb28fb8ea5937da125e8d3fec6f24e377f - coder - Gitea: Git with a cup of tea

shishantbiswas/coder

mirror of https://github.com/coder/coder.git synced 2026-06-02 20:48:20 +00:00

Files

T

M Atif Ali 51cfec3261 chore: reuse syft and cosign install actions across workflows (#16981 )

This pull request adds new GitHub Actions for installing `cosign` and
`syft`, and updates the CI, release, and security workflows.

**New Actions:**  
- [`install-cosign`](.github/actions/install-cosign/action.yaml):
Installs `cosign` with a configurable version.
- [`install-syft`](.github/actions/install-syft/action.yaml): Installs
`syft` with a configurable version.

**Workflow Updates:**  
- CI, release, and security workflows now use `install-cosign` and
`install-syft`.

2025-03-25 01:22:17 +00:00

11 lines

258 B

YAML

Raw Blame History

 name: "Install cosign"
 description: |
   Cosign Github Action.
 runs:
   using: "composite"
   steps:
     - name: Install cosign
       uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
       with:
         cosign-release: "v2.4.3"