From 06866c0b4cbaf554d86a4c7e21f457682baed9ad Mon Sep 17 00:00:00 2001
From: Jason Hall <jasonhall@redhat.com>
Date: Thu, 25 Aug 2022 14:23:40 -0400
Subject: [PATCH] bump cosign version so it can sign (#2224)

---
 .github/workflows/images.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/images.yaml b/.github/workflows/images.yaml
index fbfbbd2bd..487324325 100644
--- a/.github/workflows/images.yaml
+++ b/.github/workflows/images.yaml
@@ -91,9 +91,9 @@ jobs:
 
     # Sign images if not a PR.
     - if: github.event_name != 'pull_request'
-      uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
+      uses: sigstore/cosign-installer@b3413d484cc23cf8778c3d2aa361568d4eb54679 # v2.5.1
       with:
-        cosign-release: 'v1.4.1'
+        cosign-release: 'v1.11.1'
     - if: github.event_name != 'pull_request'
       env:
         COSIGN_EXPERIMENTAL: "true"