We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 478228f commit f550961Copy full SHA for f550961
.github/workflows/build-image-signed-cosign.yml
@@ -20,9 +20,7 @@ jobs:
20
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
21
22
- name: Install Cosign
23
- uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
24
- with:
25
- cosign-release: 'v2.1.1'
+ uses: sigstore/[email protected]
26
27
- name: Setup Docker buildx
28
uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf
@@ -56,5 +54,6 @@ jobs:
56
54
env:
57
55
DIGEST: ${{ steps.build-and-push.outputs.digest }}
58
run: |
+ cosign version
59
echo "ghcr.io/${{ github.repository }}:daily" | xargs -I {} cosign sign --yes {}@${DIGEST}
60
echo "ghcr.io/${{ github.repository }}:latest" | xargs -I {} cosign sign --yes {}@${DIGEST}
0 commit comments