|
79 | 79 | --file ./Dockerfile.dless \ |
80 | 80 | --output type=image,push=true \ |
81 | 81 | . |
82 | | - |
83 | | - - name: Install Cosign |
84 | | - uses: sigstore/cosign-installer@v3.8.1 |
85 | | - |
86 | | - - name: Sign ghcr images |
87 | | - shell: bash |
88 | | - env: |
89 | | - COSIGN_EXPERIMENTAL: 1 |
90 | | - run: | |
91 | | - cosign sign --yes "ghcr.io/${{ github.repository }}:${{ env.IMAGE_TAG }}" |
92 | | - cosign sign --yes "ghcr.io/${{ github.repository }}:${{ env.IMAGE_TAG }}-dless" |
93 | | - |
94 | | - - name: Sign docker hub images |
95 | | - if: ${{ env.USE_DOCKER_HUB == 'true' }} |
96 | | - shell: bash |
97 | | - env: |
98 | | - COSIGN_EXPERIMENTAL: 1 |
99 | | - run: | |
100 | | - cosign sign --yes "${{ secrets.DOCKER_HUB_REPO }}:${{ env.IMAGE_TAG }}" |
101 | | - cosign sign --yes "${{ secrets.DOCKER_HUB_REPO }}:${{ env.IMAGE_TAG }}-dless" |
102 | | -
|
103 | | - - name: Verify ghcr image signatures |
104 | | - shell: bash |
105 | | - env: |
106 | | - COSIGN_EXPERIMENTAL: 1 |
107 | | - run: | |
108 | | - cosign verify \ |
109 | | - --certificate-identity=https://github.com/${{ github.repository }}/.github/workflows/build-container.yml@${{ github.ref }} \ |
110 | | - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ |
111 | | - "ghcr.io/${{ github.repository }}:${{ env.IMAGE_TAG }}" |
112 | | -
|
113 | | - cosign verify \ |
114 | | - --certificate-identity=https://github.com/${{ github.repository }}/.github/workflows/build-container.yml@${{ github.ref }} \ |
115 | | - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ |
116 | | - "ghcr.io/${{ github.repository }}:${{ env.IMAGE_TAG }}-dless" |
117 | | - |
118 | | - - name: Verify docker hub image signatures |
119 | | - if: ${{ env.USE_DOCKER_HUB == 'true' }} |
120 | | - shell: bash |
121 | | - env: |
122 | | - COSIGN_EXPERIMENTAL: 1 |
123 | | - run: | |
124 | | - cosign verify \ |
125 | | - --certificate-identity=https://github.com/${{ github.repository }}/.github/workflows/build-container.yml@${{ github.ref }} \ |
126 | | - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ |
127 | | - "${{ secrets.DOCKER_HUB_REPO }}:${{ env.IMAGE_TAG }}" |
128 | | -
|
129 | | - cosign verify \ |
130 | | - --certificate-identity=https://github.com/${{ github.repository }}/.github/workflows/build-container.yml@${{ github.ref }} \ |
131 | | - --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ |
132 | | - "${{ secrets.DOCKER_HUB_REPO }}:${{ env.IMAGE_TAG }}-dless" |
0 commit comments