diff options
| author | Benjamin Sherman <benjamin@holyarmy.org> | 2024-04-12 17:02:33 -0500 |
|---|---|---|
| committer | Benjamin Sherman <benjamin@holyarmy.org> | 2024-04-12 17:02:33 -0500 |
| commit | 53869f2cbfca3551b93b271b67dffdff12697070 (patch) | |
| tree | cbb365b6291427eb01116bfded8885c1bfe6cc68 | |
| parent | 9c67a9c024a2bf27e1e18fa24af92ef18b7860e9 (diff) | |
| download | AeroCore-OS-53869f2cbfca3551b93b271b67dffdff12697070.tar.gz AeroCore-OS-53869f2cbfca3551b93b271b67dffdff12697070.zip | |
chore(ci): expect signing by default
| -rw-r--r-- | .github/workflows/build.yml | 20 |
1 files changed, 9 insertions, 11 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 8840974..d5be3bc 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -138,14 +138,12 @@ jobs: # Sign container - #- uses: sigstore/cosign-installer@v3.4.0 - # if: github.event_name != 'pull_request' - - #- name: Sign container image - # if: github.event_name != 'pull_request' - # run: | - # cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS} - # env: - # TAGS: ${{ steps.push.outputs.digest }} - # COSIGN_EXPERIMENTAL: false - # COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} + - name: Sign container image + uses: sigstore/cosign-installer@v3.4.0 + if: github.event_name != 'pull_request' + run: | + cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS} + env: + TAGS: ${{ steps.push.outputs.digest }} + COSIGN_EXPERIMENTAL: false + COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} |