fix: add DOCKER_CONTENT_TRUST

radiorabe · Mar 10, 2023 · af49236 · af49236
1 parent d5165fb
commit af49236
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -91,6 +91,9 @@ jobs:
           labels: |
             ${{ steps.meta.outputs.labels }}
             version=${{ steps.meta.outputs.version }}
+        env:
+          DOCKER_CONTENT_TRUST: 1
+
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
@@ -127,6 +130,8 @@ jobs:
           labels: |
             ${{ steps.meta.outputs.labels }}
             version=${{ steps.meta.outputs.version }}
+        env:
+          DOCKER_CONTENT_TRUST: 1
 
       - name: Sign the images with GitHub OIDC Token using cosign
         run: cosign sign ${TAGS}