1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-15 17:51:01 +00:00

add missing install of cosign in the CIs pipelines

Signed-off-by: cpanato <ctadeu@gmail.com>
This commit is contained in:
cpanato 2022-03-20 09:43:25 +01:00
parent 91e339ec75
commit acd7788af2
No known key found for this signature in database
GPG key ID: 37CA4627A2CA778F
2 changed files with 16 additions and 0 deletions

View file

@ -188,6 +188,7 @@ jobs:
permissions:
id-token: write
contents: read
steps:
- name: Setup QEMU
@ -256,8 +257,15 @@ jobs:
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
run: go install github.com/google/go-containerregistry/cmd/crane@v0.8.0
- name: Install cosign
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v1.6.0'
- name: Sign Artifacts to main release channel
if: github.ref == 'refs/heads/main' && env.GHCR_USERNAME != ''
run: make docker.sign
env:
RELEASE_TAG: main
COSIGN_EXPERIMENTAL: 1

View file

@ -72,6 +72,7 @@ jobs:
permissions:
id-token: write
contents: read
steps:
- name: Checkout
@ -98,9 +99,16 @@ jobs:
if: env.GHCR_USERNAME != ''
run: go install github.com/google/go-containerregistry/cmd/crane@v0.8.0
- name: Install cosign
if: env.GHCR_USERNAME != ''
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v1.6.0'
- name: Sign Container Image
if: env.GHCR_USERNAME != ''
run: make docker.sign
env:
RELEASE_TAG: ${{ github.event.inputs.version }}
SOURCE_TAG: main
COSIGN_EXPERIMENTAL: 1