From 45dad42de4c0fbcf3941bf455dc055427e976053 Mon Sep 17 00:00:00 2001 From: XLion Date: Wed, 27 Nov 2024 03:18:22 +0800 Subject: [PATCH] feat(ci): buildah: del `disable-content-trust`, enable zstd compression; bump sigstore/cosign-installer to 3.7.0 (#39) --- .github/workflows/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3a979f3..a61ef2d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -132,7 +132,7 @@ jobs: username: ${{ env.REGISTRY_USER }} password: ${{ env.REGISTRY_PASSWORD }} extra-args: | - --disable-content-trust + --compression-format=zstd # This section is optional and only needs to be enabled if you plan on distributing # your project for others to consume. You will need to create a public and private key @@ -140,7 +140,7 @@ jobs: # to consume. For more details, review the image signing section of the README. # Sign container - - uses: sigstore/cosign-installer@v3.5.0 + - uses: sigstore/cosign-installer@v3.7.0 if: github.event_name != 'pull_request' - name: Sign container image