Skip to content

Commit dafa2a7

Browse files
authored
Update website-publish.yml
1 parent 0290009 commit dafa2a7

1 file changed

Lines changed: 0 additions & 15 deletions

File tree

.github/workflows/website-publish.yml

Lines changed: 0 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -77,18 +77,3 @@ jobs:
7777
labels: ${{ steps.meta.outputs.labels }}
7878
cache-from: type=gha
7979
cache-to: type=gha,mode=max
80-
81-
# Sign the resulting Docker image digest except on PRs.
82-
# This will only write to the public Rekor transparency log when the Docker
83-
# repository is public to avoid leaking data. If you would like to publish
84-
# transparency data even for private images, pass --force to cosign below.
85-
# https://github.com/sigstore/cosign
86-
- name: Sign the published Docker image
87-
if: ${{ github.event_name != 'pull_request' }}
88-
env:
89-
# https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
90-
TAGS: ${{ steps.meta.outputs.tags }}
91-
DIGEST: ${{ steps.build-and-push.outputs.digest }}
92-
# This step uses the identity token to provision an ephemeral certificate
93-
# against the sigstore community Fulcio instance.
94-
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}

0 commit comments

Comments
 (0)