From 8d82851f0f17bd8e1276433679198375c530bbef Mon Sep 17 00:00:00 2001 From: Carlos Tadeu Panato Junior Date: Wed, 27 Jul 2022 13:59:49 +0200 Subject: [PATCH] update go builder and cosign image (#934) Signed-off-by: cpanato --- .github/workflows/validate-release.yml | 4 ++-- release/cloudbuild.yaml | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/validate-release.yml b/.github/workflows/validate-release.yml index ae85fe412..8d6db93c8 100644 --- a/.github/workflows/validate-release.yml +++ b/.github/workflows/validate-release.yml @@ -39,8 +39,8 @@ jobs: statuses: none env: - CROSS_BUILDER_IMAGE: ghcr.io/gythialy/golang-cross:v1.17.11-0@sha256:b0c3083b0a420ff649d5a5bfd7e0a96719ab0a7b3f99a049a4950d836a72637a - COSIGN_IMAGE: gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84 + CROSS_BUILDER_IMAGE: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d + COSIGN_IMAGE: gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94 steps: - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2 diff --git a/release/cloudbuild.yaml b/release/cloudbuild.yaml index 2837eda11..8eb22c409 100644 --- a/release/cloudbuild.yaml +++ b/release/cloudbuild.yaml @@ -32,16 +32,16 @@ steps: echo "Checking out ${_GIT_TAG}" git checkout ${_GIT_TAG} -- name: 'gcr.io/projectsigstore/cosign:v1.9.0@sha256:ef2d14e16dbb7786d8713e4898a8512e69ace4105f5b371a9c115ffcc3e85d84' +- name: 'gcr.io/projectsigstore/cosign:v1.10.0@sha256:a719237925984033fb72685c1998d922c903bbe62464f6d401b5108d3195bb94' dir: "go/src/sigstore/rekor" env: - COSIGN_EXPERIMENTAL=true - TUF_ROOT=/tmp args: - 'verify' - - 'ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90' + - 'ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d' -- name: ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90 +- name: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d entrypoint: /bin/sh dir: "go/src/sigstore/rekor" env: @@ -64,7 +64,7 @@ steps: gcloud auth configure-docker \ && make release -- name: ghcr.io/gythialy/golang-cross:v1.18.3-0@sha256:d4614e3a12fd43b1ef29252d1add330c0b496b5313eda37975d4a87815a6ae90 +- name: ghcr.io/gythialy/golang-cross:v1.18.4-0@sha256:eb34062f525b626622ada1b4e7ee782537edef2c0938122fc133ea2ca4fafe9d entrypoint: 'bash' dir: "go/src/sigstore/rekor" env: