From e17526767a358e34e58730132545aa0312a9e052 Mon Sep 17 00:00:00 2001
From: Rushaway <rushaway@hotmail.fr>
Date: Thu, 29 Oct 2026 11:14:50 +0100
Subject: [PATCH] fix(ci): pin sigstore/cosign-installer to v4.1.2

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/docker-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index afc0108d2..25ca3060a 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -153,7 +153,7 @@ jobs:
       # not the mutable tag — so a future re-tag doesn't invalidate the
       # signature).
       - name: Install cosign
-        uses: sigstore/cosign-installer@v4
+        uses: sigstore/cosign-installer@v4.1.2
         with:
           cosign-release: 'v2.4.1'