From 18fa1818fea49e4fb2c53cb5d058f57874ee5cfb Mon Sep 17 00:00:00 2001
From: "uniproject-renovate[bot]"
 <254712713+uniproject-renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Nov 2026 19:44:07 +0000
Subject: [PATCH] Update sigstore/cosign-installer action to v4

---
 .github/workflows/docker-tag.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker-tag.yaml b/.github/workflows/docker-tag.yaml
index b45556a..6cad480 100644
--- a/.github/workflows/docker-tag.yaml
+++ b/.github/workflows/docker-tag.yaml
@@ -51,7 +51,7 @@ jobs:
           cache-to: type=registry,ref=registry.uniproject.jp/official/analyze-bot:buildcache,mode=max
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+        uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4