mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-14 11:57:59 +00:00
add missing install of cosign in the CIs pipelines
Signed-off-by: cpanato <ctadeu@gmail.com>
This commit is contained in:
parent
91e339ec75
commit
acd7788af2
2 changed files with 16 additions and 0 deletions
8
.github/workflows/ci.yml
vendored
8
.github/workflows/ci.yml
vendored
|
@ -188,6 +188,7 @@ jobs:
|
|||
|
||||
permissions:
|
||||
id-token: write
|
||||
contents: read
|
||||
|
||||
steps:
|
||||
- name: Setup QEMU
|
||||
|
@ -256,8 +257,15 @@ jobs:
|
|||
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
|
||||
run: go install github.com/google/go-containerregistry/cmd/crane@v0.8.0
|
||||
|
||||
- name: Install cosign
|
||||
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
|
||||
uses: sigstore/cosign-installer@main
|
||||
with:
|
||||
cosign-release: 'v1.6.0'
|
||||
|
||||
- name: Sign Artifacts to main release channel
|
||||
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
|
||||
run: make docker.sign
|
||||
env:
|
||||
RELEASE_TAG: main
|
||||
COSIGN_EXPERIMENTAL: 1
|
||||
|
|
8
.github/workflows/release.yml
vendored
8
.github/workflows/release.yml
vendored
|
@ -72,6 +72,7 @@ jobs:
|
|||
|
||||
permissions:
|
||||
id-token: write
|
||||
contents: read
|
||||
|
||||
steps:
|
||||
- name: Checkout
|
||||
|
@ -98,9 +99,16 @@ jobs:
|
|||
if: env.GHCR_USERNAME != ''
|
||||
run: go install github.com/google/go-containerregistry/cmd/crane@v0.8.0
|
||||
|
||||
- name: Install cosign
|
||||
if: env.GHCR_USERNAME != ''
|
||||
uses: sigstore/cosign-installer@main
|
||||
with:
|
||||
cosign-release: 'v1.6.0'
|
||||
|
||||
- name: Sign Container Image
|
||||
if: env.GHCR_USERNAME != ''
|
||||
run: make docker.sign
|
||||
env:
|
||||
RELEASE_TAG: ${{ github.event.inputs.version }}
|
||||
SOURCE_TAG: main
|
||||
COSIGN_EXPERIMENTAL: 1
|
||||
|
|
Loading…
Reference in a new issue