obsidian-ai d38fce4cb8 ci: pin sbom/cosign/attest actions to node20-safe versions ... forgejo-runner v6.4.0 ships node20; floating tags @v0/@v3/@v2 now resolve to actions whose runs.using=node24, which the runner cannot exec. Pin to last node20-shipping release of each: - anchore/sbom-action@v0.17.2 - sigstore/cosign-installer@v3.7.0 - actions/attest-build-provenance@v2.2.3		2026-05-06 13:57:49 +01:00
..
build-iso.yml	ci: pin sbom/cosign/attest actions to node20-safe versions	2026-05-06 13:57:49 +01:00
lint.yml	ci: pin actions to node20-safe tags + runner sock pass-through	2026-05-06 10:50:15 +01:00