Skip to content

Commit

Permalink
Merge pull request #41 from anderbubble/fix-cosign
Browse files Browse the repository at this point in the history
Attempt cosign signing without a key
  • Loading branch information
anderbubble authored Dec 9, 2023
2 parents 810e04a + ef33145 commit df741b3
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions .github/workflows/container-publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -139,11 +139,9 @@ jobs:
- name: Sign image with a key
if: github.event_name != 'pull_request'
run: |
cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}"
cosign sign --yes "${TAGS}@${DIGEST}"
env:
TAGS: ${{ steps.docker_meta.outputs.tags }}
COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
DIGEST: ${{ steps.build-and-push.outputs.digest }}

- name: Sign the images with GitHub OIDC Token
Expand Down

0 comments on commit df741b3

Please sign in to comment.