From 2ddcec2a7a5611783407e5b4fe20670e2c60276c Mon Sep 17 00:00:00 2001 From: Swapnanil Gupta Date: Wed, 8 Apr 2026 18:58:48 +0000 Subject: [PATCH] update cosign to v3.0.5 in Dockerfile Signed-off-by: Swapnanil Gupta --- Dockerfile | 2 +- cmd/nerdctl/image/image_pull_linux_test.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6bbec3d9a36..15cc8e390e8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -332,7 +332,7 @@ WORKDIR /go/src/github.com/containerd/nerdctl VOLUME /tmp ENV CGO_ENABLED=0 # copy cosign binary for integration test -COPY --from=ghcr.io/sigstore/cosign/cosign:v2.2.3@sha256:8fc9cad121611e8479f65f79f2e5bea58949e8a87ffac2a42cb99cf0ff079ba7 /ko-app/cosign /usr/local/bin/cosign +COPY --from=ghcr.io/sigstore/cosign/cosign:v3.0.5@sha256:be924970ba7438c22e18067dec5637946d6566eac711f5bedd1584e7137008fb /ko-app/cosign /usr/local/bin/cosign # installing soci for integration test ARG SOCI_SNAPSHOTTER_VERSION RUN fname="soci-snapshotter-${SOCI_SNAPSHOTTER_VERSION}-${TARGETOS:-linux}-${TARGETARCH:-amd64}.tar.gz" && \ diff --git a/cmd/nerdctl/image/image_pull_linux_test.go b/cmd/nerdctl/image/image_pull_linux_test.go index 5637680e139..744ab85dc51 100644 --- a/cmd/nerdctl/image/image_pull_linux_test.go +++ b/cmd/nerdctl/image/image_pull_linux_test.go @@ -102,7 +102,7 @@ CMD ["echo", "nerdctl-build-test-string"] _, pub := nerdtest.GenerateCosignKeyPair(data, helpers, "2") return helpers.Command("pull", "--quiet", "--verify=cosign", "--cosign-key="+pub, data.Labels().Get("image_ref")+":two") }, - Expected: test.Expects(12, nil, nil), + Expected: test.Expects(1, nil, nil), }, }, }