From 2fdcf15e7266c3eed21d81497180e0521464020c Mon Sep 17 00:00:00 2001
From: tranch <tranch.xiao@gmail.com>
Date: Mon, 13 Jul 2026 08:25:32 +0800
Subject: Pass Cosign password to signing step

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

(limited to '.github/workflows')

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1edbe30..e72f937 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -187,6 +187,7 @@ jobs:
         env:
           COSIGN_EXPERIMENTAL: false
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
           DIGEST: ${{ steps.push-image.outputs.digest }}
         run: |
           cosign sign -y --key env://COSIGN_PRIVATE_KEY ${IMAGE_REGISTRY}/${IMAGE_NAME}@${DIGEST}
-- 
cgit v1.2.3