fix typo
This commit is contained in:
@@ -110,13 +110,9 @@ jobs:
|
|||||||
- name: Sign container image
|
- name: Sign container image
|
||||||
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
|
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
|
||||||
run: |
|
run: |
|
||||||
# 1. Wir lösen das Tag in der Registry zu einem Digest auf (kein Docker-Daemon nötig)
|
|
||||||
DIGEST=$(cosign resolve humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable)
|
|
||||||
|
|
||||||
# 2. Wir signieren EXAKT diesen Digest (als OCI-Referenz, nicht als Tag-Signature)
|
|
||||||
cosign sign -y \
|
cosign sign -y \
|
||||||
--key env://COSIGN_PRIVATE_KEY \
|
--key env://COSIGN_PRIVATE_KEY \
|
||||||
"$DIGEST"
|
humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable
|
||||||
env:
|
env:
|
||||||
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
||||||
COSIGN_PASSWORD: ""
|
COSIGN_PASSWORD: ""
|
||||||
|
|||||||
Reference in New Issue
Block a user