update cosign workflow

Signed-off-by: Frank Jogeleit <[email protected]>
kyverno · Jan 19, 2024 · a63cfa7 · a63cfa7
1 parent 7314070
commit a63cfa7
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
@@ -64,17 +64,15 @@ jobs:
           path: policy-reporter-kyverno-plugin-bom.cdx.json
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@9becc617647dfa20ae7b1151972e9b3a2c338a2b # v2.8.1
-        with:
-          cosign-release: 'v1.13.0'
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0
 
       - shell: bash
         env:
           COSIGN_EXPERIMENTAL: 'true'
           COSIGN_REPOSITORY: ghcr.io/kyverno/signatures
         run: |
           set -e
-          cosign sign \
+          cosign sign --yes \
             -a "repo=${{ github.repository }}" \
             -a "workflow=${{ github.workflow }}" \
             -a "ref=${{ github.sha }}" \