This commit is contained in:
gunnar
2026-06-06 11:37:09 +02:00
parent 8d8b714fbb
commit 4ebd6abbda
+5 -1
View File
@@ -107,12 +107,16 @@ jobs:
if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@v4.1.2
- name: Install skopeo
run: sudo apt-get update && sudo apt-get install -y skopeo
- name: Sign container image
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: |
DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \
humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
env:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
COSIGN_PASSWORD: ""