humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Update build.yml

Browse Source
This commit is contained in:
humocs-man
2026-02-17 17:42:05 +01:00
committed by GitHub
parent b63ba4459e
commit c64489d001
1 changed files with 22 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build.yml
+22 -22
View File
@@ -4,13 +4,13 @@ on:
pull_request: pull_request:
branches: branches:
- main - main
schedule: # schedule:
- cron: '05 10 * * *' # 10:05am UTC everyday # - cron: '05 10 * * *' # 10:05am UTC everyday
push: # push:
branches: # branches:
- main # - main
paths-ignore: # paths-ignore:
- '**/README.md' # - '**/README.md'
workflow_dispatch: workflow_dispatch:
env: env:
@@ -178,21 +178,21 @@ jobs:
# OPTIONAL: Image Signing with Cosign # OPTIONAL: Image Signing with Cosign
# Signing is disabled by default. To enable, see README.md "Optional: Enable Image Signing" section. # Signing is disabled by default. To enable, see README.md "Optional: Enable Image Signing" section.
# - name: Install Cosign - name: Install Cosign
# uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0 uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
# if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch) if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
#
# - name: Sign container image - name: Sign container image
# if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch) if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
# run: | run: |
# IMAGE_FULL="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}" IMAGE_FULL="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
# for tag in ${{ steps.metadata.outputs.tags }}; do for tag in ${{ steps.metadata.outputs.tags }}; do
# cosign sign -y --key env://COSIGN_PRIVATE_KEY $IMAGE_FULL:$tag cosign sign -y --key env://COSIGN_PRIVATE_KEY $IMAGE_FULL:$tag
# done done
# env: env:
# TAGS: ${{ steps.push.outputs.digest }} TAGS: ${{ steps.push.outputs.digest }}
# COSIGN_EXPERIMENTAL: false COSIGN_EXPERIMENTAL: false
# COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
# OPTIONAL: SBOM Attestation # OPTIONAL: SBOM Attestation
# Attaches SBOM (Software Bill of Materials) to your signed image for supply chain security. # Attaches SBOM (Software Bill of Materials) to your signed image for supply chain security.