We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1e9747b commit 64c2a58Copy full SHA for 64c2a58
1 file changed
.github/workflows/releaser.yml
@@ -106,7 +106,7 @@ jobs:
106
cache: false # No cache for release builds — prevents cache poisoning attacks
107
108
- name: Install Syft
109
- uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
+ uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
110
111
- name: Install Cosign
112
uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
0 commit comments