cosign: 2.2.3 -> 2.2.4

Fixes GHSA-95pr-fxf5-86gv and GHSA-88jx-383q-w4qc.

Changes:
https://github.com/sigstore/cosign/releases/tag/v2.2.4
This commit is contained in:
Thomas Gerbet 2024-04-11 00:20:20 +02:00
parent b607b9427a
commit 2e87a8cbd1

View file

@ -13,13 +13,13 @@
}:
buildGoModule rec {
pname = "cosign";
version = "2.2.3";
version = "2.2.4";
src = fetchFromGitHub {
owner = "sigstore";
repo = pname;
rev = "v${version}";
hash = "sha256-+y79Uml1TvKypbwcWkZZF415qUPPfieP5pKHO+APjPE=";
hash = "sha256-csFFB1VYwd009fL4QHDK9jmCmwFJ45CVutLVzluG1NU=";
};
buildInputs =
@ -28,7 +28,7 @@ buildGoModule rec {
nativeBuildInputs = [ pkg-config installShellFiles ];
vendorHash = "sha256-udMnSdXBjlDQlQRzhhLBDBcHwREkEev0uLIVjT8BbuU=";
vendorHash = "sha256-LYdbHpucF/lUzMu0m5y0Gt3A/8ISUs9oLM79mTF/REM=";
subPackages = [
"cmd/cosign"