Ensure the released OCI artifact is also captured in rekor

Signed-off-by: Marco Franssen <marco.franssen@gmail.com>
spiffe · Jun 27, 2023 · f4c421a · f4c421a
1 parent 386e736
commit f4c421a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml
@@ -66,3 +66,5 @@ jobs:
             digest="$(awk -F "[, ]+" '/Digest/{print $NF}' < .digest)"
             cosign sign ghcr.io/"${GITHUB_REPOSITORY_OWNER}"/helm-charts/"${name}"@"${digest}"
           done
+        env:
+          COSIGN_YES: true