Auto sign the docker image

ysdragon · Nov 22, 2024 · 3b17205 · 3b17205
1 parent 3bc80da
commit 3b17205
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
@@ -55,6 +55,8 @@ jobs:
       - name: Sign the published Docker image
         if: ${{ github.event_name != 'pull_request' }}
         env:
+          COSIGN_KEY: ${{secrets.COSIGN_KEY}}
+          COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
           TAGS: ${{ steps.meta.outputs.tags }}
           DIGEST: ${{ steps.build-and-push.outputs.digest }}
-        run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+        run: echo "${TAGS}" | xargs -I {} cosign sign --key env://COSIGN_KEY --yes {}@${DIGEST}