File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 7777 labels : ${{ steps.meta.outputs.labels }}
7878 cache-from : type=gha
7979 cache-to : type=gha,mode=max
80-
81- # Sign the resulting Docker image digest except on PRs.
82- # This will only write to the public Rekor transparency log when the Docker
83- # repository is public to avoid leaking data. If you would like to publish
84- # transparency data even for private images, pass --force to cosign below.
85- # https://github.com/sigstore/cosign
86- - name : Sign the published Docker image
87- if : ${{ github.event_name != 'pull_request' }}
88- env :
89- # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
90- TAGS : ${{ steps.meta.outputs.tags }}
91- DIGEST : ${{ steps.build-and-push.outputs.digest }}
92- # This step uses the identity token to provision an ephemeral certificate
93- # against the sigstore community Fulcio instance.
94- run : echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
You can’t perform that action at this time.
0 commit comments