another cosign fix
This commit is contained in:
@@ -107,13 +107,13 @@ jobs:
|
|||||||
if: github.event_name != 'pull_request'
|
if: github.event_name != 'pull_request'
|
||||||
uses: sigstore/cosign-installer@v4.1.2
|
uses: sigstore/cosign-installer@v4.1.2
|
||||||
|
|
||||||
- name: Sign container image
|
-- name: Sign container image
|
||||||
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
|
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
|
||||||
run: |
|
run: |
|
||||||
# Cosign löst das Tag automatisch zum Digest auf und signiert DIESEN
|
DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable)
|
||||||
cosign sign -y \
|
cosign sign -y \
|
||||||
--key env://COSIGN_PRIVATE_KEY \
|
--key env://COSIGN_PRIVATE_KEY \
|
||||||
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable | jq -r .Digest)"
|
"$DIGEST"
|
||||||
env:
|
env:
|
||||||
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
||||||
COSIGN_PASSWORD: ""
|
COSIGN_PASSWORD: ""
|
||||||
|
|||||||
Reference in New Issue
Block a user