Skip to content

Commit

Permalink
ci(container-build-push): skip confirmation prompts, when signing image
Browse files Browse the repository at this point in the history
Also, removed the `COSIGN_EXPERIMENTAL` env var, as that's not needed since Cosign v2

Signed-off-by: Siddhesh Mhadnak <siddhesh.mhadnak@outlook.com>
  • Loading branch information
sid-maddy committed Aug 3, 2024
1 parent 32a48d5 commit fa35537
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions .github/workflows/container-build-push.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -115,12 +115,10 @@ jobs:
# https://github.com/sigstore/cosign
- name: Sign the published Docker image
if: ${{ github.ref == 'refs/heads/main' || startswith(github.event.ref, 'refs/tags/v') }}
env:
COSIGN_EXPERIMENTAL: 'true'
shell: bash
# This step uses the identity token to provision an ephemeral certificate against the sigstore community Fulcio
# instance.
run: cosign sign ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker_build_push.outputs.digest }}
run: cosign sign --yes ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker_build_push.outputs.digest }}

- name: Export digest
if: ${{ github.ref == 'refs/heads/main' || startswith(github.event.ref, 'refs/tags/v') }}
Expand Down

0 comments on commit fa35537

Please sign in to comment.