feat(ci): buildah: del disable-content-trust, enable zstd compression; bump sigstore/cosign-installer to 3.7.0 (#39)

This commit is contained in:
XLion 2024-11-27 03:18:22 +08:00 committed by GitHub
parent 7aa4737dfa
commit 45dad42de4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -132,7 +132,7 @@ jobs:
username: ${{ env.REGISTRY_USER }} username: ${{ env.REGISTRY_USER }}
password: ${{ env.REGISTRY_PASSWORD }} password: ${{ env.REGISTRY_PASSWORD }}
extra-args: | extra-args: |
--disable-content-trust --compression-format=zstd
# This section is optional and only needs to be enabled if you plan on distributing # This section is optional and only needs to be enabled if you plan on distributing
# your project for others to consume. You will need to create a public and private key # your project for others to consume. You will need to create a public and private key
@ -140,7 +140,7 @@ jobs:
# to consume. For more details, review the image signing section of the README. # to consume. For more details, review the image signing section of the README.
# Sign container # Sign container
- uses: sigstore/cosign-installer@v3.5.0 - uses: sigstore/cosign-installer@v3.7.0
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
- name: Sign container image - name: Sign container image