From 8d902a7b054b02d6d66ccdf9e5af5fc22d3c3e88 Mon Sep 17 00:00:00 2001
From: "strg-public-bot[bot]"
 <174349635+strg-public-bot[bot]@users.noreply.github.com>
Date: Thu, 7 May 2026 04:22:13 +0000
Subject: [PATCH] ci(github-action): update sigstore/cosign-installer action to
 v4.1.2

---
 .github/workflows/docker-build-push-github.yaml | 2 +-
 .github/workflows/docker-build-push-google.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker-build-push-github.yaml b/.github/workflows/docker-build-push-github.yaml
index a36a792..c3f8d23 100644
--- a/.github/workflows/docker-build-push-github.yaml
+++ b/.github/workflows/docker-build-push-github.yaml
@@ -66,7 +66,7 @@ jobs:
 
       # https://github.com/marketplace/actions/cosign-installer
       - name: setup cosign
-        uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
       # https://github.com/marketplace/actions/docker-setup-buildx
       - name: setup docker buildx
diff --git a/.github/workflows/docker-build-push-google.yaml b/.github/workflows/docker-build-push-google.yaml
index ea12628..f921d9f 100644
--- a/.github/workflows/docker-build-push-google.yaml
+++ b/.github/workflows/docker-build-push-google.yaml
@@ -99,7 +99,7 @@ jobs:
 
       # https://github.com/marketplace/actions/cosign-installer
       - name: setup cosign
-        uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
       # https://github.com/marketplace/actions/docker-setup-buildx
       - name: setup docker buildx