We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 48e58c1 commit 31ed46bCopy full SHA for 31ed46b
.github/workflows/release.yaml
@@ -1,5 +1,5 @@
1
concurrency:
2
- group: ${{ github.workflow }}-${{ github.ref }}
+ group: "${{ github.workflow }}-${{ github.ref }}"
3
cancel-in-progress: true
4
5
on:
@@ -19,6 +19,7 @@ jobs:
19
id-token: write
20
runs-on: ubuntu-latest
21
steps:
22
+ - uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3
23
- uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
24
with:
25
# Disabling shallow clone is recommended for improving relevancy of reporting
0 commit comments