try signing seb server docker image
This commit is contained in:
parent
091f7408a7
commit
e35b038085
1 changed files with 14 additions and 1 deletions
15
.github/workflows/buildReporting.yml
vendored
15
.github/workflows/buildReporting.yml
vendored
|
@ -111,6 +111,9 @@ jobs:
|
||||||
run: |
|
run: |
|
||||||
echo $TAG_NAME
|
echo $TAG_NAME
|
||||||
echo ${{ env.TAG_NAME }}
|
echo ${{ env.TAG_NAME }}
|
||||||
|
-
|
||||||
|
name: Install Cosign
|
||||||
|
uses: sigstore/cosign-installer@main
|
||||||
-
|
-
|
||||||
name: Set up QEMU
|
name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v1
|
uses: docker/setup-qemu-action@v1
|
||||||
|
@ -140,4 +143,14 @@ jobs:
|
||||||
file: ./docker/Dockerfile
|
file: ./docker/Dockerfile
|
||||||
push: true
|
push: true
|
||||||
tags: |
|
tags: |
|
||||||
anhefti/seb-server:${{ env.TAG_NAME }}
|
anhefti/seb-server:${{ env.TAG_NAME }}
|
||||||
|
-
|
||||||
|
name: Sign image with a key
|
||||||
|
run: |
|
||||||
|
echo ${COSIGN_PRIVATE_KEY} > /tmp/my_cosign.key && \
|
||||||
|
cosign sign --key /tmp/my_cosign.key ${TAGS}
|
||||||
|
env:
|
||||||
|
TAGS: |
|
||||||
|
anhefti/seb-server:${{ env.TAG_NAME }}
|
||||||
|
COSIGN_KEY: ${{secrets.COSIGN_PRIVATE_KEY}}
|
||||||
|
COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
|
Loading…
Reference in a new issue