ci: signing issue (#5219)

* ci: upgrade cosign * ci: upgrade cosign-installer dependency
kubeshop · Mar 20, 2024 · b938caf · b938caf
1 parent d79a2eb
commit b938caf
Show file tree

Hide file tree

Showing 5 changed files with 52 additions and 53 deletions.
diff --git a/.github/workflows/docker-build-api-executors-tag.yaml b/.github/workflows/docker-build-api-executors-tag.yaml
@@ -18,7 +18,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Docker Buildx
@@ -84,7 +84,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Docker Buildx
@@ -139,7 +139,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Docker Buildx
@@ -193,27 +193,27 @@ jobs:
       matrix:
         executor:
           [
-              artillery,
-              curl,
-              example,
-              ginkgo,
-              k6,
-              kubepug,
-              postman,
-              soapui,
-              init,
-              scraper,
-              template,
-              tracetest,
-              zap,
+            artillery,
+            curl,
+            example,
+            ginkgo,
+            k6,
+            kubepug,
+            postman,
+            soapui,
+            init,
+            scraper,
+            template,
+            tracetest,
+            zap,
           ]
 
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up QEMU
@@ -276,7 +276,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up QEMU
@@ -337,10 +337,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
-
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
 
@@ -449,7 +448,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up QEMU
@@ -510,7 +509,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up QEMU
@@ -570,14 +569,14 @@ jobs:
       matrix:
         version:
           [
-              cypress8,
-              cypress9,
-              cypress10,
-              cypress11,
-              cypress12,
-              cypress13,
-              yarn,
-              npm,
+            cypress8,
+            cypress9,
+            cypress10,
+            cypress11,
+            cypress12,
+            cypress13,
+            yarn,
+            npm,
           ]
 
     runs-on: ubuntu-latest
@@ -655,22 +654,22 @@ jobs:
       matrix:
         version:
           [
-              cypress8,
-              cypress9,
-              cypress10,
-              cypress11,
-              cypress12,
-              cypress13,
-              yarn,
-              npm,
+            cypress8,
+            cypress9,
+            cypress10,
+            cypress11,
+            cypress12,
+            cypress13,
+            yarn,
+            npm,
           ]
 
     runs-on: ubuntu-latest
     steps:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v1
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Docker Buildx
@@ -712,7 +711,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up QEMU
@@ -770,14 +769,14 @@ jobs:
   update_api_helm_charts:
     needs:
       [
-          api,
-          single_executor,
-          executor_jmeter,
-          executor_maven,
-          executor_gradle,
-          executor_cypress,
-          executor_cypress_manifest,
-          executor_playwright,
+        api,
+        single_executor,
+        executor_jmeter,
+        executor_maven,
+        executor_gradle,
+        executor_cypress,
+        executor_cypress_manifest,
+        executor_playwright,
       ]
     runs-on: ubuntu-latest
     steps:
@@ -808,4 +807,4 @@ jobs:
         env:
           SERVICE: api
           GH_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
-          RELEASE_VERSION: ${{ steps.tag.outputs.tag }}
+          RELEASE_VERSION: ${{ steps.tag.outputs.tag }}
diff --git a/.github/workflows/release-dev.yaml b/.github/workflows/release-dev.yaml
@@ -128,7 +128,7 @@ jobs:
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
       - name: Download Artifacts for Linux
         uses: actions/download-artifact@master

diff --git a/.github/workflows/release-log-server.yaml b/.github/workflows/release-log-server.yaml
@@ -29,7 +29,7 @@ jobs:
         id: buildx
         uses: docker/setup-buildx-action@v1
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Go

diff --git a/.github/workflows/release-log-sidecar.yaml b/.github/workflows/release-log-sidecar.yaml
@@ -29,7 +29,7 @@ jobs:
         id: buildx
         uses: docker/setup-buildx-action@v1
 
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
 
       - name: Set up Go

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -118,7 +118,7 @@ jobs:
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
-      - uses: sigstore/cosign-installer@v3.0.5
+      - uses: sigstore/cosign-installer@v3.4.0
       - uses: anchore/sbom-action/[email protected]
       - name: Download Artifacts for Linux
         uses: actions/download-artifact@master