From a60ac06507ea0383b891695910d7fd1fb7cb5f49 Mon Sep 17 00:00:00 2001 From: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> Date: Sat, 28 May 2022 08:59:51 -0500 Subject: [PATCH] --wip-- [skip ci] --- .github/workflows/publishimage.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/publishimage.yml b/.github/workflows/publishimage.yml index 69e95bcb8f4..3bcd3ffcb40 100644 --- a/.github/workflows/publishimage.yml +++ b/.github/workflows/publishimage.yml @@ -22,11 +22,13 @@ permissions: on: push: branches: - - main + - main env: GO_VERSION: 1.17.7 jobs: + env: + COSIGN_EXPERIMENTAL: "true" unit-test: name: publishimage runs-on: ubuntu-latest @@ -56,3 +58,8 @@ jobs: go env -w GOFLAGS=-mod=mod make install make scorecard-ko + - name: Install Cosign + uses: sigstore/cosign-installer@f700e6fbbab82f6897758a3af7a8dede4e308656 # v1.2.1 + - name: Sign image + run: | + cosign sign ghcr.io/${{github.repository_owner}}/stunning-tribble:${{ github.sha }}