Set precise version for cosign and ko matching go1.22

Signed-off-by: Nicolas-Peiffer <102670102+Nicolas-Peiffer@users.noreply.github.com>
ThalesGroup · Oct 16, 2024 · bd4ce0c · bd4ce0c
1 parent ddb790a
commit bd4ce0c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr
@@ -18,10 +18,13 @@
 # linux/amd64 (x86_64) and linux/arm64 (aarch64).
 #==============================================================================#
 
-# Set Go & tools versions
+# Set Go & tools versions. Be carreful when upgrading these versions, make sure
+# to keep them in sync with the version golang
 ARG GOLANG_VERSION=1.22.5
 ARG TRIVY_VERSION=0.49.1
 ARG SYFT_VERSION=1.9.0
+ARG COSIGN_VERSION=2.4.0
+ARG KO_VERSION=0.16.0
 # goreleaser v2.1.0 ships with go1.22.5
 ARG GORELEASER_VERSION=2.1.0
 

diff --git a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr
@@ -22,6 +22,8 @@
 ARG GOLANG_VERSION=1.22.5
 ARG TRIVY_VERSION=0.49.1
 ARG SYFT_VERSION=1.9.0
+ARG COSIGN_VERSION=2.4.0
+ARG KO_VERSION=0.16.0
 # goreleaser v2.1.0 ships with go1.22.5
 ARG GORELEASER_VERSION=2.1.0