From 20ceedf10f3496f5ce44b051572df48b3ce91d84 Mon Sep 17 00:00:00 2001
From: "descope[bot]" <107609351+descope[bot]@users.noreply.github.com>
Date: Sun, 5 Jul 2026 05:33:05 +0000
Subject: [PATCH] ci(action): update sigstore/cosign-installer action to v4

---
 .github/actions/pack/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/actions/pack/action.yml b/.github/actions/pack/action.yml
index 6dda2454..65b626eb 100644
--- a/.github/actions/pack/action.yml
+++ b/.github/actions/pack/action.yml
@@ -175,7 +175,7 @@ runs:
         push-to-registry: true
 
     - name: Install Cosign
-      uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
+      uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
     - name: Sign the image with Cosign (keyless)
       shell: bash