Nils Hanke f13f80b8af

ci: update Syft to 0.72.0 and Grype to 0.57.1 (#1120) ...

* ci: update Syft to 0.72.0 and Grype to 0.57.1
* ci: install Cosign before Syft
* ci: directly read private key from environment for Cosign
* ci: add --add-cpes-if-none to Grype
* ci: use cosign attest directly instead of syft attest

2023-02-22 14:17:02 +01:00

..

action.yml

ci: update Syft to 0.72.0 and Grype to 0.57.1 (#1120)

2023-02-22 14:17:02 +01:00