@@ -232,10 +232,11 @@ jobs:
232232 - name : Push to GHCR
233233 id : push
234234 if : github.event_name != 'pull_request'
235- uses : Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8 .0
235+ uses : nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0 .0
236236 with :
237- attempt_limit : 3
238- attempt_delay : 15000
237+ max_attempts : 3
238+ retry_wait_seconds : 15
239+ timeout_minutes : 30
239240 command : |
240241 set -euox pipefail
241242
@@ -256,7 +257,7 @@ jobs:
256257 run : |
257258 cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ env.IMAGE_NAME }}@${TAGS}
258259 env :
259- TAGS : ${{ steps.push.outputs.outputs && fromJSON(steps.push.outputs.outputs). digest }}
260+ TAGS : ${{ steps.push.outputs.digest }}
260261 COSIGN_EXPERIMENTAL : false
261262 COSIGN_PRIVATE_KEY : ${{ secrets.SIGNING_SECRET }}
262263
@@ -266,7 +267,7 @@ jobs:
266267 run : |
267268 image_name="${{ env.IMAGE_NAME }}"
268269 env :
269- TAGS : ${{ steps.push.outputs.outputs && fromJSON(steps.push.outputs.outputs). digest }}
270+ TAGS : ${{ steps.push.outputs.digest }}
270271 COSIGN_EXPERIMENTAL : false
271272 COSIGN_PRIVATE_KEY : ${{ secrets.SIGNING_SECRET }}
272273
@@ -284,7 +285,7 @@ jobs:
284285 id : upload-sbom
285286 env :
286287 IMAGE : ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}
287- DIGEST : ${{ steps.push.outputs.outputs && fromJSON(steps.push.outputs.outputs). digest }}
288+ DIGEST : ${{ steps.push.outputs.digest }}
288289 SBOM : ${{ steps.generate-sbom.outputs.SBOM }}
289290 run : |
290291 cd "$(dirname "${SBOM}")"
@@ -314,7 +315,7 @@ jobs:
314315 uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
315316 with :
316317 subject-name : ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}
317- subject-digest : ${{ steps.push.outputs.outputs && fromJSON(steps.push.outputs.outputs). digest }}
318+ subject-digest : ${{ steps.push.outputs.digest }}
318319 push-to-registry : true
319320
320321 check :
0 commit comments