Skip to content

Commit

Permalink
Update release.yml
Browse files Browse the repository at this point in the history
Signed-off-by: KhulnaSoft bot <43526132+khulnasoft-bot@users.noreply.github.com>
  • Loading branch information
khulnasoft-bot authored Nov 24, 2024
1 parent c0148ac commit f52b062
Showing 1 changed file with 5 additions and 9 deletions.
14 changes: 5 additions & 9 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,6 @@ env:
# github.repository as <account>/<repo>
IMAGE_NAME: ${{ github.repository }}


jobs:
build:
runs-on: ubuntu-latest
Expand Down Expand Up @@ -87,15 +86,12 @@ jobs:
- name: Sign the published Docker image
# This step uses the identity token to provision an ephemeral certificate
# against the sigstore community Fulcio instance.
run: >
echo "${{ steps.meta.outputs.tags }}" | xargs -I {}
cosign sign --yes {}@${{ steps.build-and-push.outputs.digest }}
run: |
echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign --yes {}@${{ steps.build-and-push.outputs.digest }}
- name: Verify the signature of the published Docker image
env:
IDENTITY: "https://github.com/khulnasoft/deployflow/.github/workflows/release.yml@.*"
OIDC_ISSUER: https://token.actions.githubusercontent.com
run: >
echo "${{ steps.meta.outputs.tags }}" | xargs -I {}
cosign verify {}@${{ steps.build-and-push.outputs.digest }}
--certificate-identity-regexp=$IDENTITY --certificate-oidc-issuer=$OIDC_ISSUER
OIDC_ISSUER: "https://token.actions.githubusercontent.com"
run: |
echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign verify {}@${{ steps.build-and-push.outputs.digest }} --certificate-identity-regexp=$IDENTITY --certificate-oidc-issuer=$OIDC_ISSUER

0 comments on commit f52b062

Please # to comment.