chore(ci): expect signing by default
This commit is contained in:
parent
9c67a9c024
commit
53869f2cbf
1 changed files with 9 additions and 11 deletions
20
.github/workflows/build.yml
vendored
20
.github/workflows/build.yml
vendored
|
@ -138,14 +138,12 @@ jobs:
|
||||||
|
|
||||||
# Sign container
|
# Sign container
|
||||||
|
|
||||||
#- uses: sigstore/cosign-installer@v3.4.0
|
- name: Sign container image
|
||||||
# if: github.event_name != 'pull_request'
|
uses: sigstore/cosign-installer@v3.4.0
|
||||||
|
if: github.event_name != 'pull_request'
|
||||||
#- name: Sign container image
|
run: |
|
||||||
# if: github.event_name != 'pull_request'
|
cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS}
|
||||||
# run: |
|
env:
|
||||||
# cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS}
|
TAGS: ${{ steps.push.outputs.digest }}
|
||||||
# env:
|
COSIGN_EXPERIMENTAL: false
|
||||||
# TAGS: ${{ steps.push.outputs.digest }}
|
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
||||||
# COSIGN_EXPERIMENTAL: false
|
|
||||||
# COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
|
||||||
|
|
Loading…
Reference in a new issue