workflows: Recursively sign multi-arch images with cosign

See: toolbx-images/images#116 See: toolbx-images/images#113 See: containers/podman#21209
travier · Jan 12, 2024 · 46dfaef · 46dfaef
1 parent dbec199
commit 46dfaef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
@@ -78,7 +78,7 @@ jobs:
       - name: Sign container image
         if: (github.event_name == 'push' || github.event_name == 'schedule') && github.ref == 'refs/heads/main'
         run: |
-          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.REGISTRY }}/${{ env.NAME }}@${{ steps.push.outputs.digest }}
+          cosign sign -y --recursive --key env://COSIGN_PRIVATE_KEY ${{ env.REGISTRY }}/${{ env.NAME }}@${{ steps.push.outputs.digest }}
         env:
           COSIGN_EXPERIMENTAL: false
           COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}