Bump gittuf (#43)

* Bump gittuf github action Signed-off-by: Aditya Sirish <[email protected]> * Add GHA to dependabot Signed-off-by: Aditya Sirish <[email protected]> --------- Signed-off-by: Aditya Sirish <[email protected]>
in-toto · Oct 10, 2024 · 1d9edfc · 1d9edfc
1 parent d0c30f7
commit 1d9edfc
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 3 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,3 +4,7 @@ updates:
   directory: "/"
   schedule:
     interval: daily
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "daily"
diff --git a/.github/workflows/gittuf-rsl-main.yml b/.github/workflows/gittuf-rsl-main.yml
@@ -12,7 +12,7 @@ jobs:
       id-token: write
     steps:
       - name: Install gittuf
-        uses: gittuf/gittuf-installer@fe644793aaaa419fef63800d5cf318663aa93105
+        uses: gittuf/gittuf-installer@5c0fb4a2a0dc9434598cf2e74bb601d76861fc97
       - name: Install gitsign
         uses: chainguard-dev/actions/setup-gitsign@main
       - name: Checkout repository

diff --git a/.github/workflows/gittuf-rsl-non-main.yml b/.github/workflows/gittuf-rsl-non-main.yml
@@ -12,7 +12,7 @@ jobs:
       id-token: write
     steps:
       - name: Install gittuf
-        uses: gittuf/gittuf-installer@fe644793aaaa419fef63800d5cf318663aa93105
+        uses: gittuf/gittuf-installer@5c0fb4a2a0dc9434598cf2e74bb601d76861fc97
       - name: Install gitsign
         uses: chainguard-dev/actions/setup-gitsign@main
       - name: Checkout repository

diff --git a/.github/workflows/gittuf-verify.yml b/.github/workflows/gittuf-verify.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install gittuf
-        uses: gittuf/gittuf-installer@8ce8fbd070477ec72678151e82b82c3d866d9fcd
+        uses: gittuf/gittuf-installer@5c0fb4a2a0dc9434598cf2e74bb601d76861fc97
         with:
           gittuf-version: main
       - name: Checkout and verify repository