sigstore: default blob attestation verification to SLSA provenance v1

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-04-07 16:41:12 +02:00
parent 76d6a50711
commit ab22ca5180
3 changed files with 6 additions and 2 deletions
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -36,7 +36,7 @@ const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? descr
 beforeAll(async () => {
  const cosignInstall = new CosignInstall();
  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.4'
+    version: 'v3.0.6'
  });
  await cosignInstall.install(cosignBinPath);
 }, 100000);