bump cosign version so it can sign
@@ -91,9 +91,9 @@ jobs:
# Sign images if not a PR.
- if: github.event_name != 'pull_request'
- uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
+ uses: sigstore/cosign-installer@b3413d484cc23cf8778c3d2aa361568d4eb54679 # v2.5.1
with:
- cosign-release: 'v1.4.1'
+ cosign-release: 'v1.11.1'
- if: github.event_name != 'pull_request'
env:
COSIGN_EXPERIMENTAL: "true"
