fix: container signing (#55)

ublue-os · Sep 18, 2023 · 9b695c1 · 9b695c1
1 parent c67cd6e
commit 9b695c1
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/build-boxkit.yml b/.github/workflows/build-boxkit.yml
@@ -87,10 +87,9 @@ jobs:
       - uses: sigstore/cosign-installer@v3.1.2
 
       - name: Sign container image
+        if: github.event_name != 'pull_request'
         run: |
-          echo "${{ env.COSIGN_PRIVATE_KEY }}" > cosign.key
-          wc -c cosign.key
-          cosign sign -y --key cosign.key ${{ steps.registry_case.outputs.lowercase }}/${{ env.IMAGE_NAME }}@${TAGS}
+          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.registry_case.outputs.lowercase }}/${{ env.IMAGE_NAME }}@${TAGS}
         env:
           TAGS: ${{ steps.push.outputs.digest }}
           COSIGN_EXPERIMENTAL: false