Add required identity flags for Cosign (#268)

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>
sigstore · Mar 6, 2023 · 57d8ad5 · 57d8ad5
1 parent 9538fd4
commit 57d8ad5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/release/ko-sign-release-images.sh b/release/ko-sign-release-images.sh
@@ -34,8 +34,8 @@ fi
 echo "Signing images with Keyless..."
 readarray -t server_images < <(cat timestampServerImagerefs || true)
 cosign sign --yes -a GIT_HASH="${GIT_HASH}" -a GIT_VERSION="${GIT_VERSION}" "${server_images[@]}"
-cosign verify "${server_images[@]}"
+cosign verify --certificate-identity-regexp ".*" --certificate-oidc-issuer-regexp ".*" "${server_images[@]}"
 
 readarray -t cli_images < <(cat timestampCLIImagerefs || true)
 cosign sign --yes -a GIT_HASH="${GIT_HASH}" -a GIT_VERSION="${GIT_VERSION}" "${cli_images[@]}"
-cosign verify "${cli_images[@]}"
+cosign verify --certificate-identity-regexp ".*" --certificate-oidc-issuer-regexp ".*" "${cli_images[@]}"