diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ff6d9a4..81b14d1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,7 +11,6 @@ env: # github.repository as / IMAGE_NAME: ${{ github.repository }} - jobs: build: runs-on: ubuntu-latest @@ -87,15 +86,12 @@ jobs: - name: Sign the published Docker image # This step uses the identity token to provision an ephemeral certificate # against the sigstore community Fulcio instance. - run: > - echo "${{ steps.meta.outputs.tags }}" | xargs -I {} - cosign sign --yes {}@${{ steps.build-and-push.outputs.digest }} + run: | + echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign --yes {}@${{ steps.build-and-push.outputs.digest }} - name: Verify the signature of the published Docker image env: IDENTITY: "https://github.com/khulnasoft/deployflow/.github/workflows/release.yml@.*" - OIDC_ISSUER: https://token.actions.githubusercontent.com - run: > - echo "${{ steps.meta.outputs.tags }}" | xargs -I {} - cosign verify {}@${{ steps.build-and-push.outputs.digest }} - --certificate-identity-regexp=$IDENTITY --certificate-oidc-issuer=$OIDC_ISSUER + OIDC_ISSUER: "https://token.actions.githubusercontent.com" + run: | + echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign verify {}@${{ steps.build-and-push.outputs.digest }} --certificate-identity-regexp=$IDENTITY --certificate-oidc-issuer=$OIDC_ISSUER