using the version explicitly to eliminate the version validation error

Error without fix: Unable to validate cosign version: 'v2.0.2'
ChameleonCloud · Nov 3, 2023 · b62daa6 · b62daa6
1 parent f1ec9cc
commit b62daa6
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -27,7 +27,9 @@ jobs:
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@204a51a57a74d190b284a0ce69b44bc37201f343
+        uses: sigstore/cosign-installer@main
+        with:
+          cosign-release: 'v2.0.2' # optional
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4b4e9c3e2d4531116a6f8ba8e71fc6e2cb6e6c8c