File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 8181 labels : ${{ steps.meta.outputs.labels }}
8282 cache-from : type=gha
8383 cache-to : type=gha,mode=max
84-
85- # Sign the resulting Docker image digest except on PRs.
86- # This will only write to the public Rekor transparency log when the Docker
87- # repository is public to avoid leaking data. If you would like to publish
88- # transparency data even for private images, pass --force to cosign below.
89- # https://github.com/sigstore/cosign
90- - name : Sign the published Docker image
91- if : ${{ github.event_name != 'pull_request' }}
92- env :
93- # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
94- TAGS : ${{ steps.meta.outputs.tags }}
95- DIGEST : ${{ steps.build-and-push.outputs.digest }}
96- # This step uses the identity token to provision an ephemeral certificate
97- # against the sigstore community Fulcio instance.
98- run : echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
You can’t perform that action at this time.
0 commit comments