sst/uphy-20241229
1
0
Fork 0
Code Releases Packages Activity Actions

chore(ci): expect signing by default

Browse source
This commit is contained in:
Benjamin Sherman 2024-04-12 17:02:33 -05:00
parent 9c67a9c024
commit 53869f2cbf
No known key found for this signature in database
GPG key ID: 24E3D151565CA98B
1 changed files with 9 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
.github/workflows/build.yml vendored
View file

@ -138,14 +138,12 @@ jobs:
# Sign container
#- uses: sigstore/cosign-installer@v3.4.0
# if: github.event_name != 'pull_request'
#- name: Sign container image
# if: github.event_name != 'pull_request'
# run: |
# cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS}
# env:
# TAGS: ${{ steps.push.outputs.digest }}
# COSIGN_EXPERIMENTAL: false
# COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
- name: Sign container image
uses: sigstore/cosign-installer@v3.4.0
if: github.event_name != 'pull_request'
run: |
cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ steps.build_image.outputs.image }}@${TAGS}
env:
TAGS: ${{ steps.push.outputs.digest }}
COSIGN_EXPERIMENTAL: false
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}