fix sign step
All checks were successful
Docker Build Smart Logic / Build amd64 & arm64 (push) Successful in 23s
All checks were successful
Docker Build Smart Logic / Build amd64 & arm64 (push) Successful in 23s
This commit is contained in:
@@ -252,18 +252,17 @@ jobs:
|
|||||||
cosign version
|
cosign version
|
||||||
|
|
||||||
- name: Sign image
|
- name: Sign image
|
||||||
|
if: env.IS_TAG == 'true'
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
|
|
||||||
IMAGE_TO_SIGN="${REGISTRY_HOST}/${IMAGE_BASE}:${VERSION}"
|
IMAGE_TO_SIGN="${REGISTRY_HOST}/${IMAGE_BASE}:${VERSION}"
|
||||||
|
|
||||||
echo "Signing image $IMAGE_TO_SIGN"
|
echo "Signing image $IMAGE_TO_SIGN"
|
||||||
|
|
||||||
# Cosign login falls nötig
|
# Key nur für Tags nutzen
|
||||||
export COSIGN_PASSWORD="${{ secrets.COSIGN_KEY }}"
|
cosign sign --key <(echo "${{ secrets.COSIGN_KEY }}") "$IMAGE_TO_SIGN"
|
||||||
|
|
||||||
cosign sign --key <(echo "$COSIGN_PASSWORD") "$IMAGE_TO_SIGN"
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user