Merge pull request #2489 from cpanato/update-cosign

Update cosign image to v1.7.1
kubernetes · Apr 6, 2022 · 158de15 · 158de15
2 parents dd596b4 + 9d436d5
commit 158de15
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 7 deletions.
diff --git a/dependencies.yaml b/dependencies.yaml
@@ -41,7 +41,7 @@ dependencies:
 
   # cosign
   - name: "gcr.io/projectsigstore/cosign"
-    version: v1.6.0@sha256:b667002156c4bf9fedd9273f689b800bb5c341660e710e3bbac981c9795423d9
+    version: v1.7.1@sha256:7d735456ae0c6489d088981a228b944e8a729c2aa979d824a74e44ab843d6ad2
     refPaths:
     - path: images/build/go-runner/cloudbuild.yaml
       match: gcr.io/projectsigstore/cosign:v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?@sha256:[a-f0-9]{64}

diff --git a/images/build/go-runner/cloudbuild.yaml b/images/build/go-runner/cloudbuild.yaml
@@ -10,12 +10,12 @@ options:
   machineType: 'N1_HIGHCPU_8'
 
 steps:
-  - name: 'gcr.io/projectsigstore/cosign:v1.6.0@sha256:b667002156c4bf9fedd9273f689b800bb5c341660e710e3bbac981c9795423d9'
+  - name: 'gcr.io/projectsigstore/cosign:v1.7.1@sha256:7d735456ae0c6489d088981a228b944e8a729c2aa979d824a74e44ab843d6ad2'
     dir: ./images/build/go-runner
     args:
     - 'verify'
     - '--key'
-    - 'distroless-cosign.pub' # From https://github.com/GoogleContainerTools/distroless/blob/main/cosign.pub
+    - 'https://raw.githubusercontent.com/GoogleContainerTools/distroless/main/cosign.pub'
     - 'gcr.io/distroless/$_DISTROLESS_IMAGE'
 
   - name: 'gcr.io/k8s-staging-test-infra/gcb-docker-gcloud:v20210917-12df099d55'

diff --git a/images/build/go-runner/distroless-cosign.pub b/images/build/go-runner/distroless-cosign.pub