cosign: 1.5.1 -> 1.5.2

Fixes CVE-2022-23649.
https://github.com/sigstore/cosign/security/advisories/GHSA-ccxc-vr6p-4858
This commit is contained in:
Thomas Gerbet 2022-02-19 10:26:45 +01:00
parent 62aa918237
commit 95fbeff9ac

View File

@ -2,13 +2,13 @@
buildGoModule rec {
pname = "cosign";
version = "1.5.1";
version = "1.5.2";
src = fetchFromGitHub {
owner = "sigstore";
repo = pname;
rev = "v${version}";
sha256 = "sha256-hQFkbHOmtk0SqFSPw1+5nCvjq9cKsGzFPtK4jXDrubQ=";
sha256 = "sha256-37jahAGgQn7HwwdRTlAS/oJQ3BxTkMViI6iJMBYFgjI=";
};
buildInputs = lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)