From 75633324647a8c5ec558275fdea7e5ad43995e7d Mon Sep 17 00:00:00 2001 From: cpanato Date: Fri, 22 Jul 2022 12:28:25 +0200 Subject: [PATCH] update go builder and cosign Signed-off-by: cpanato --- release/cloudbuild.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/release/cloudbuild.yaml b/release/cloudbuild.yaml index 0a1839b06..c79b47bcb 100644 --- a/release/cloudbuild.yaml +++ b/release/cloudbuild.yaml @@ -32,17 +32,17 @@ steps: echo "Checking out ${_GIT_TAG}" git checkout ${_GIT_TAG} -- name: 'gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84' +- name: 'gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94' dir: "go/src/sigstore/cosign" env: - COSIGN_EXPERIMENTAL=true - TUF_ROOT=/tmp args: - 'verify' - - 'ghcr.io/gythialy/golang-cross:v1.17.11-0@sha256:b0c3083b0a420ff649d5a5bfd7e0a96719ab0a7b3f99a049a4950d836a72637a' + - 'ghcr.io/gythialy/golang-cross:v1.17.12-0@sha256:be96e626662b658457d0a4efc69c276be88fa8275e0bd1e74beec64ced1e2d1c' # maybe we can build our own image and use that to be more in a safe side -- name: ghcr.io/gythialy/golang-cross:v1.17.11-0@sha256:b0c3083b0a420ff649d5a5bfd7e0a96719ab0a7b3f99a049a4950d836a72637a +- name: ghcr.io/gythialy/golang-cross:v1.17.12-0@sha256:be96e626662b658457d0a4efc69c276be88fa8275e0bd1e74beec64ced1e2d1c entrypoint: /bin/sh dir: "go/src/sigstore/cosign" env: @@ -65,7 +65,7 @@ steps: gcloud auth configure-docker \ && make release -- name: ghcr.io/gythialy/golang-cross:v1.17.11-0@sha256:b0c3083b0a420ff649d5a5bfd7e0a96719ab0a7b3f99a049a4950d836a72637a +- name: ghcr.io/gythialy/golang-cross:v1.17.12-0@sha256:be96e626662b658457d0a4efc69c276be88fa8275e0bd1e74beec64ced1e2d1c entrypoint: 'bash' dir: "go/src/sigstore/cosign" env: