diff options
| author | Benjamin Sherman <benjamin@holyarmy.org> | 2024-04-12 17:02:33 -0500 |
|---|---|---|
| committer | Benjamin Sherman <benjamin@holyarmy.org> | 2024-04-12 17:02:33 -0500 |
| commit | 7e17e593a36f3b32760567cf9e35d3c73df76342 (patch) | |
| tree | cbb365b6291427eb01116bfded8885c1bfe6cc68 /.github | |
| parent | 276766e8bfb7901a9813ad4dcc1c5ad4b4cbc8a0 (diff) | |
| download | AeroCore-OS-7e17e593a36f3b32760567cf9e35d3c73df76342.tar.gz AeroCore-OS-7e17e593a36f3b32760567cf9e35d3c73df76342.zip | |
chore(ci): expect signing by default
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/build.yml | 20 |
1 files changed, 9 insertions, 11 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 8840974..d5be3bc 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -138,14 +138,12 @@ jobs: # Sign container - #- uses: sigstore/cosign-installer@v3.4.0 - # if: github.event_name != 'pull_request' - - #- name: Sign container image - # if: github.event_name != 'pull_request' - # run: | - # cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS} - # env: - # TAGS: ${{ steps.push.outputs.digest }} - # COSIGN_EXPERIMENTAL: false - # COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} + - name: Sign container image + uses: sigstore/cosign-installer@v3.4.0 + if: github.event_name != 'pull_request' + run: | + cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS} + env: + TAGS: ${{ steps.push.outputs.digest }} + COSIGN_EXPERIMENTAL: false + COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} |