Remove remnant of cosign key signing step

Signed-off-by: Jonathon Anderson <[email protected]>
warewulf · Dec 10, 2023 · 64ffe30 · 64ffe30
1 parent df741b3
commit 64ffe30
Showing 1 changed file with 0 additions and 8 deletions.
diff --git a/.github/workflows/container-publish.yml b/.github/workflows/container-publish.yml
@@ -136,14 +136,6 @@ jobs:
           cache-to: type=gha,mode=max
 
       # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
-      - name: Sign image with a key
-        if: github.event_name != 'pull_request'
-        run: |
-          cosign sign --yes "${TAGS}@${DIGEST}"
-        env:
-          TAGS: ${{ steps.docker_meta.outputs.tags }}
-          DIGEST: ${{ steps.build-and-push.outputs.digest }}
-
       - name: Sign the images with GitHub OIDC Token
         if: github.event_name != 'pull_request'
         env: