signing support

dowjones · Feb 23, 2023 · a3cff16 · a3cff16
1 parent e8dd649
commit a3cff16
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -56,8 +56,11 @@ jobs:
       with:
         cosign-release: 'v1.13.1'
     - name: Get signing key
-      run: echo "${{ secrets.COSIGN_KEY }}" > cosign.key
+      run: echo "$KEY" > cosign.key
+      shell: bash
       if: github.event_name != 'pull_request'
+      env:
+        KEY: ${{ secrets.COSIGN_KEY }}
     - name: Sign container image with annotations from our environment
       run: |
         cosign sign --key cosign.key \
@@ -67,4 +70,4 @@ jobs:
           ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.tags }}
       if: github.event_name != 'pull_request'
       env:
-        COSIGN_PASSWORD: "${{ secrets.SIGNING_KEY_PASSWORD}}"    
+        COSIGN_PASSWORD: "${{ secrets.COSIGN_PASSWORD}}"