From 3e8200a764bdcd0fda3fe0d2a7b0fd34a76ea15b Mon Sep 17 00:00:00 2001 From: Swapnanil Gupta Date: Thu, 12 Mar 2026 20:24:11 +0000 Subject: [PATCH 1/2] update cosign to v3.0.5 for CI Signed-off-by: Swapnanil Gupta --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 5ab9d77f08e..dc379b55c45 100644 --- a/Dockerfile +++ b/Dockerfile @@ -331,7 +331,7 @@ WORKDIR /go/src/github.com/containerd/nerdctl VOLUME /tmp ENV CGO_ENABLED=0 # copy cosign binary for integration test -COPY --from=ghcr.io/sigstore/cosign/cosign:v2.2.3@sha256:8fc9cad121611e8479f65f79f2e5bea58949e8a87ffac2a42cb99cf0ff079ba7 /ko-app/cosign /usr/local/bin/cosign +COPY --from=ghcr.io/sigstore/cosign/cosign:v3.0.5 /ko-app/cosign /usr/local/bin/cosign # installing soci for integration test ARG SOCI_SNAPSHOTTER_VERSION RUN fname="soci-snapshotter-${SOCI_SNAPSHOTTER_VERSION}-${TARGETOS:-linux}-${TARGETARCH:-amd64}.tar.gz" && \ From 996f548c5555e4004084e51d6bdecaa52f085442 Mon Sep 17 00:00:00 2001 From: Swapnanil Gupta Date: Thu, 12 Mar 2026 21:11:52 +0000 Subject: [PATCH 2/2] update cosign exit code in tests Signed-off-by: Swapnanil Gupta --- cmd/nerdctl/image/image_pull_linux_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/nerdctl/image/image_pull_linux_test.go b/cmd/nerdctl/image/image_pull_linux_test.go index 5637680e139..744ab85dc51 100644 --- a/cmd/nerdctl/image/image_pull_linux_test.go +++ b/cmd/nerdctl/image/image_pull_linux_test.go @@ -102,7 +102,7 @@ CMD ["echo", "nerdctl-build-test-string"] _, pub := nerdtest.GenerateCosignKeyPair(data, helpers, "2") return helpers.Command("pull", "--quiet", "--verify=cosign", "--cosign-key="+pub, data.Labels().Get("image_ref")+":two") }, - Expected: test.Expects(12, nil, nil), + Expected: test.Expects(1, nil, nil), }, }, }