diff options
| author | Jordan Petridis <16531710+alatiera@users.noreply.github.com> | 2025-08-22 20:47:22 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-08-22 13:47:22 -0400 |
| commit | 974c121d223120ae707d1236bf1ebd1d27ae8205 (patch) | |
| tree | 4eb5154a032468dac36f1badf455d8da53338f0f | |
| parent | a55a2e58c5e212751fd8952273b3b36e143e3ef4 (diff) | |
| download | AeroCore-OS-974c121d223120ae707d1236bf1ebd1d27ae8205.tar.gz AeroCore-OS-974c121d223120ae707d1236bf1ebd1d27ae8205.zip | |
docs: Skip password promot during cosign key generation (#131)
The key in GH secret requires that its not password protected in order to work.
Add COSIGN_PASSWORD="" in the example command so everyone that copy pastes it avoids the prompt they have to
manually ignore otherwise.
| -rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -49,10 +49,10 @@ First, install the [cosign CLI tool](https://edu.chainguard.dev/open-source/sigs With the cosign tool installed, run inside your repo folder: ```bash -cosign generate-key-pair +COSIGN_PASSWORD="" cosign generate-key-pair ``` -Do NOT put in a password when it asks you to, just press enter. The signing key will be used in GitHub Actions and will not work if it is encrypted. +The signing key will be used in GitHub Actions and will not work if it is password protected. > [!WARNING] > Be careful to *never* accidentally commit `cosign.key` into your git repo. If this key goes out to the public, the security of your repository is compromised. |