chore: pin new sign installer to commit sha (#1966)

Signed-off-by: Christopher Phillips <[email protected]>
anchore · Jun 26, 2024 · c7f02e0 · c7f02e0
1 parent 58360ea
commit c7f02e0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/validations.yaml b/.github/workflows/validations.yaml
@@ -178,7 +178,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Install Cosign
-        uses: sigstore/[email protected]
+        uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 #v3.5.0
 
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4.1.7