From 2502c854fbb9b1fcbeff5147f075415a7b559427 Mon Sep 17 00:00:00 2001 From: Jose Javier Merchante Date: Mon, 6 Nov 2023 18:29:13 +0100 Subject: [PATCH] [docker] Fix a bug causing cosign not signing images This commits fixes a bug that causes that cosign v2 doesn't sign the images provided by docker_meta.tags. Signed-off-by: Jose Javier Merchante --- .github/workflows/docker-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index f1b818ec..801ae37a 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -94,7 +94,7 @@ jobs: - name: Sign image with a key run: | - cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}" + echo "${TAGS}" | xargs -I {} cosign sign -y -r --key env://COSIGN_PRIVATE_KEY "{}@${DIGEST}" env: TAGS: ${{ steps.meta.outputs.tags }} COSIGN_PRIVATE_KEY: ${{secrets.COSIGN_PRIVATE_KEY}}