diff --git a/action.yml b/action.yml index 47e528c..81f6f39 100644 --- a/action.yml +++ b/action.yml @@ -25,6 +25,10 @@ runs: - shell: bash run: | docker pull ghcr.io/home-assistant/amd64-builder:${{ steps.version.outputs.version }} + cosign verify \ + --certificate-oidc-issuer https://token.actions.githubusercontent.com \ + --certificate-identity-regexp https://github.com/home-assistant/builder/.* \ + ghcr.io/home-assistant/amd64-builder:${{ steps.version.outputs.version }} - shell: bash id: builder