pyrox.dev
lol
cosign: 2.2.3 -> 2.2.4
Fixes GHSA-95pr-fxf5-86gv and GHSA-88jx-383q-w4qc.
Changes:
https://github.com/sigstore/cosign/releases/tag/v2.2.4
+3
-3
+3
-3
pkgs/tools/security/cosign/default.nix
+3
-3
pkgs/tools/security/cosign/default.nix
···
13
13
}:
14
14
buildGoModule rec {
15
15
pname = "cosign";
16
-
version = "2.2.3";
16
+
version = "2.2.4";
17
17
18
18
src = fetchFromGitHub {
19
19
owner = "sigstore";
20
20
repo = pname;
21
21
rev = "v${version}";
22
-
hash = "sha256-+y79Uml1TvKypbwcWkZZF415qUPPfieP5pKHO+APjPE=";
22
+
hash = "sha256-csFFB1VYwd009fL4QHDK9jmCmwFJ45CVutLVzluG1NU=";
23
23
};
24
24
25
25
buildInputs =
···
28
28
29
29
nativeBuildInputs = [ pkg-config installShellFiles ];
30
30
31
-
vendorHash = "sha256-udMnSdXBjlDQlQRzhhLBDBcHwREkEev0uLIVjT8BbuU=";
31
+
vendorHash = "sha256-LYdbHpucF/lUzMu0m5y0Gt3A/8ISUs9oLM79mTF/REM=";
32
32
33
33
subPackages = [
34
34
"cmd/cosign"