veilor-os/.github/workflows
claude-veilor-bot 3db912d3cd ci: pin sbom/cosign/attest actions to node20-safe versions
forgejo-runner v6.4.0 ships node20; floating tags @v0/@v3/@v2 now
resolve to actions whose runs.using=node24, which the runner cannot
exec. Pin to last node20-shipping release of each:

- anchore/sbom-action@v0.17.2
- sigstore/cosign-installer@v3.7.0
- actions/attest-build-provenance@v2.2.3

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-06 16:10:03 +01:00
..
build-bluebuild.yml ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00
build-iso.yml ci: pin sbom/cosign/attest actions to node20-safe versions 2026-05-06 16:10:03 +01:00
lint.yml ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00